<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="6098">
<package pkgid="2166e6c594f295c1dce0f0515a0a4b6386a1ff368e53b92f6977b1553e1bf7dc" name="389-ds" arch="aarch64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="63133a6dc9ecafe288047d69a1d4b5609b561010ebc349ee54e7627ab6ac27c6" name="389-ds" arch="ppc64le">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="a1ba54cac09c4e06f6e08805fc1954c1e703b4d8b907759e7bedd03b6dc06b1e" name="389-ds" arch="s390x">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="ffe0637d7b3ab9fbb837118f5db6b17ee085cdc7699bfc07560ebf6b40d4ccdb" name="389-ds" arch="src">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="587861c43203051e9a9264a9100429a8d6185056fb5d963c341db8a3a4128c56" name="389-ds" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="c62fabb05888fe5e79c6bfde4de55cb1cf23756032cb450606bd0d14b33e45ab" name="389-ds-devel" arch="aarch64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="54f31dde6e69598e023dbb84a44dcaedc871e42590839ef692e74f0a3f3dac79" name="389-ds-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="3044af2bd02bdf1d92421d6f9e8bafe4de5560fd9c78c1833883a1f257cf6c80" name="389-ds-devel" arch="s390x">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="a79259eb160ec074a899a6e2468b6e4427fc33519133ee1e1ede61c60de01abd" name="389-ds-devel" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="96360f0cc7e67534472edee69ed42e31793a322198e6b2aea09d62f2b56873c7" name="389-ds-snmp" arch="aarch64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="b65bd3f4217f0613813eeab0afa230b48cc7001503cbaf08912e0cf57dd3f90c" name="389-ds-snmp" arch="ppc64le">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="c9090cd1c1f58abf5283a25deaa25bc1f5f156915e7428b98f02cc3636d696fc" name="389-ds-snmp" arch="s390x">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="a79576a2a74d909e070000d0be881d4a2d0abcf0a386a387992668d08d117815" name="389-ds-snmp" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="9bea7820e3f93201669e45193bc3375b08f5eef2efc5222bb31481e1d91ba3a8" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="d5fc4996b55a587aab45eab3a531638faaf4a5cdc2071f00f52f9cad4356d3b1" name="MozillaFirefox" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="060caced5a70fee41416189a5ed41d7df896c7359e9370802415961ca4dec24c" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="223aab0ad6ebb6c9db533c7a47120cd7652def8df8f7e182226db92a4bacb67b" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="54ced53e8512324703b849b95751666310f4878b900907f90b2c4f2a01d09638" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="6e677238cc93cfd01c23bc3e858ad680c02b6d39c88c4ab8a68b2cc0cb9cf780" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="3fc38d6a09627f194cb932a4b038910609a03faff897bcb91d5b0480856e0d8b" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="830b72a2f33ff7e10045caadda6fc6771958555ecc8a0811af8b8e6e35cd42b1" name="MozillaFirefox" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="ed8a696492dfadb62a8fbfb9037a21aa94770536df040c091dccbc0c038ae59e" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="56fd28862ba77cd9b5be6e21c105b788823bc6310f39cdf9dd635facf630d251" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="6590624023fa53166bf19d9e4fa10a621f2451bf9a0b9ed83d297e0c98424e87" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="8d56403fbf56038278e894819873b5243bac9669bf1cf6a28ebec9030e9e89f4" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="efe07cd3cf21717f7511dd369312272c6daf88e560654810fc4f664103b4ef4c" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="a4820ddee7cca2456cca08d563ce1d9c91e269ffda5e1f3d8baf1ee26a247003" name="MozillaFirefox-branding-upstream" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="05415ebccd37a8fda3710c5440e02e16e00680cd97a860094bedd79abeab8fc0" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="fbf76e08458cfbc859d64109b40eb3cbe0db9a3c076c1bc476204217e056c292" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="1578b00e6332349726944e0ee53ab5f29b105c8756587a462a04114796a2fa28" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="5adffce5976cbe8451b58d88e28622d96d5038b45e044d074b1da7c57dac5325" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="03c2e06b68156622f1cab9b10cbc777b23791d5f23f36d5c4f5e10123e4e8075" name="MozillaFirefox-branding-upstream" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="20ea7fc7ed82381ae5a5e21c1804d99b88306c63a635a1f5cd26c17ac1ff2a05" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="b6b8952aee701bb6f493d70b6aa2f77746da0a39b0cbe40a6c120b8de13e7337" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="e542fc256ba709a7e6e4bcb7af6117e673bc30a7f5ad835ef52a0500feebff47" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="ce35729ffc7c182996342c646ec164b2c5c1cff2ec24ee0d7c6dc22d5e667135" name="MozillaFirefox-buildsymbols" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="c31b68347b49f61790ed09667d7b660de94cfbc8edeeaee07f98b59b597d3b3a" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="d04272eee7ab0f9a6d69f7f504b82fedd569980aa979e560f0be6203095d7e67" name="MozillaFirefox-buildsymbols" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="cbd496448c3988e7b687f25ee94954126de88e616e9685352dd9304c60916384" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="797697f60a502b2af3d15e84509853590caf1a6b19b757ff9ec8a3b02b0ce1a8" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="d0b38cb7be3106baf8f2b42df02a3f98113e99035cd83185b041436f8cb07f1a" name="MozillaFirefox-devel" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="aded474960e0d118b82a3f29a086e5c73a7e208d24c5ed5ee89c5c44a9152b1e" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="74ec9a7de52918ff0947a89888eaad6f523674a79ba93da3232251871fd51e0e" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="8534b14d5d57a83c6b7d0700c4da19abc6ca82daf0e22386e3998c08f0d6bedd" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="767cdca8ad1e28ea1837ffa42902f2188bbd73d31e852bbf06d0602647102542" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="10ddca96f3cd5831d4af0f91ccffa50cfab7d83093f699face95e116ab19eaca" name="MozillaFirefox-devel" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="75269154c7e046223d5834d0d43524117c2dcb5704e8ab2fa1d22eaa754c65ac" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="99a67d7f39ff25517361c23cc68cf9b3314976cae517e7e257d9d591c1f07207" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="66d4fede02a2d0f20fde9b773a33bcd9626af4c5ac40edd39df5acebce938f78" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="4e1558df0fad1b5a7f3b866046b7883416cc07791948287c3cf093da33c7179f" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="19317e8e8fb770e9def255ded67b7fcf479f11f33c7008c8d9282a3c75540ba9" name="MozillaFirefox-translations-common" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="01033523a9032aa8179631ac86f87e53159f6226a1ccd031afe0c630b1321f13" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="6c0e8a45957e9106368a2313efea71fcd47a9602e78a0fdd474403b8054e461a" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="7334ce9d257df00aae2a23617ca03c0d56805b1bd519d5efbb8aca32055ac06c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="7fb2176d883c63a990f0de46c37d7a1902da82dd99ad026c0e0b7f1491ba78b8" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="e5de8e8bdee799c577627f5a699a12828388907afe11eaad33ced6b1435206e2" name="MozillaFirefox-translations-common" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="219581665a0117e5a84f1ef90a6082d1790bc016e2f2b6bde835bbd0d821be9b" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="468d45bb34114c1a1fd6a3d17394e3a846a1f08e8adf823ed78df474fa59d436" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="34324bceba15dff47b43585fb30c8e94670963c901faa82b208a10abb8baa09c" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="a3fe5945d92a49de15c8ec8bdbe69c83bf414137bf02f19eb552548eacad11e2" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="0c0e88ee2076071f1ce58f182ed7d2aa45c9975d4cba51f0a79f44e0b01f5733" name="MozillaFirefox-translations-other" arch="i686">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="d4361d146a960753463a1ef3e763b890b23e07de251c2c177e9c7b7141d2c809" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="7d30bb47e1a5ca2d164b34fc4010122e312e9ffdb881cdab3261aa9a369fb34b" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="f7806eb4c6a129fe31045f563e61fa82bed82dea575d1d8dcecd56fb24690cfd" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="3.144.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="dcae16ab18d68314b50e66f9f8f4e4c8ce12026edde734b5ec37d1f10465d190" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="98ffa397ff6a5a5635c71359a17ea0bfcf9e6e98cd50c59eb820badcd8e6b936" name="MozillaFirefox-translations-other" arch="i686">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="6c605ea88a086a0a722dde5391c3bf6c95dec2f78935a3efe91b6e50d22e90a8" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="2ef7de6341a7edb0950f77bdd43e60297682bd5f1c13d31bf41f279d6bff9980" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="b064724f52fea1bf907e4e7ef5f943a2c1803b3e71ef800fd9124f2094123092" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="78.11.0" rel="8.43.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1605614400">- Firefox Extended Support Release 78.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-51 (bsc#1178824)
  * CVE-2020-26951 (bmo#1667113)
    Parsing mismatches could confuse and bypass security
    sanitizer for chrome privileged code
  * CVE-2020-16012 (bmo#1642028)
    Variable time processing of cross-origin images during
    drawImage calls
  * CVE-2020-26953 (bmo#1656741)
    Fullscreen could be enabled without displaying the security
    UI
  * CVE-2020-26956 (bmo#1666300)
    XSS through paste (manual and clipboard API)
  * CVE-2020-26958 (bmo#1669355)
    Requests intercepted through ServiceWorkers lacked MIME type
    restrictions
  * CVE-2020-26959 (bmo#1669466)
    Use-after-free in WebRequestService
  * CVE-2020-26960 (bmo#1670358)
    Potential use-after-free in uses of nsTArray
  * CVE-2020-15999 (bmo#1672223)
    Heap buffer overflow in freetype
  * CVE-2020-26961 (bmo#1672528)
    DoH did not filter IPv4 mapped IP Addresses
  * CVE-2020-26965 (bmo#1661617)
    Software keyboards may have remembered typed passwords
  * CVE-2020-26966 (bmo#1663571)
    Single-word search queries were also broadcast to local
    network
  * CVE-2020-26968 (bmo#1551615, bmo#1607762, bmo#1656697,
    bmo#1657739, bmo#1660236, bmo#1667912, bmo#1671479,
    bmo#1671923)
    Memory safety bugs fixed in Firefox 83 and Firefox ESR 78.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Firefox Extended Support Release 78.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2020-55 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Firefox 84 and Firefox ESR 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610020800">- Firefox Extended Support Release 78.6.1 ESR
  * Fixed: Security fix
  * Fixed: Fixed a crash during video playback on Apple Silicon
    devices (bmo#1683579)
  MFSA 2021-01 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611662400">- Firefox Extended Support Release 78.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-04 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Firefox 85 and Firefox ESR 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Firefox Extended Support Release 78.7.1 ESR
  * Fixed: Prevent access to NTFS special paths that could lead
    to filesystem corruption. (bmo#1689598)
  * Fixed: Security fix
  MFSA 2021-06 (bsc#1181848)
  * MOZ-2021-0001 (bmo#1676636)
    Buffer overflow in depth pitch calculations for compressed
    textures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614081600">- Firefox Extended Support Release 78.8.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-08 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Firefox 86 and Firefox ESR 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616587200">- Firefox Extended Support Release 78.9.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-11 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Firefox 87 and Firefox ESR 78.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618833600">- Firefox Extended Support Release 78.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.10
  MFSA 2021-15 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Firefox Extended Support Release 78.10.1 ESR
  * Fixed: Resolved an issue caused by a recent Widevine plugin
    update which prevented some purchased video content from
    playing correctly (bmo#1705138)
  * Fixed: Security fix
  MFSA 2021-18 (bsc#1185633)
  * CVE-2021-29951 (bmo#1690062)
    Mozilla Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1622548800">- Firefox Extended Support Release 78.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes
- Mozilla Firefox ESR 78.11
  MFSA 2021-24 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Firefox 89 and Firefox ESR 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
</package>
<package pkgid="cee756064649749e887bd66b66d222043869ba89b9828013bfc4976418f7afb6" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="ead186558d7c52c7684f1bb7c758353a66860925e3d633e1e8c6e3a9967fc8b3" name="MozillaThunderbird" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="6f94d38d831817bb5e74e41b8ec64d129acf9007f073dbfc7029a36a1a1fba60" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="feeee8505c068e0f23034d3d9a4c4ccb1b8353456b7c279d47fb0d061fbd10e4" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="a9fb0e3097fdaac7095d88d52e3986b2a3e656b17c08a1977ab67588ed38c739" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3d2967d79c889d521c89c60ff9a116116fba3b48bdce3e17612e2c6ad57de068" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="ae8e7320c5a77a1c7c946944c184c151c4d333e25484959c3901830b427206d6" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f3e5cdaba4c6e6125a80d857f3e2a3ee7ba67196960848d36581981402dca0b8" name="MozillaThunderbird-translations-common" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="9ec92d753242bab8c24b14d303d48f271ed5779050b7ed5255a210c72962161d" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="8a1cb50328ba4fefa4c35aada19f278543fe979e8aadf635efb7aea7cdac55fb" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="3cfe350fdb87c6bea431a35b14baebc633ef2bcd3507fcf6e314de83f63b1ef2" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="b384ee28e49f0b8977a71c2c199f7f8fb56174be9b16dfc14616d6b14e8f95cc" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="569a34addb712300acfba227c7eb3af51c45f08fd25889ad7069007f3b48dc1c" name="MozillaThunderbird-translations-other" arch="i586">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e9355e8410a074d2aa49336754cf80cfc7b727268dbb46bc59830ee0320d102a" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="f91eb9225dd23e696c014c5c6f6c5be73e58d5659d6eb606af5efe1914cf699c" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="e6689b71b75d1902cc21df80ae874b467bfeba0aae742d57672000dcc166cbf6" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="78.10.2" rel="8.27.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1608033600">- Mozilla Thunderbird 78.6
  * new: MailExtensions: Added
    browser.windows.openDefaultBrowser() (bmo#1664708)
  * changed: Thunderbird now only shows quota exceeded
    indications on the main window (bmo#1671748)
  * changed: MailExtensions: menus API enabled in messages being
    composed (bmo#1670832)
  * changed: MailExtensions: Honor allowScriptsToClose argument
    in windows.create API function (bmo#1675940)
  * changed: MailExtensions: APIs that returned an accountId will
    reflect the account the message belongs to, not what is
    stored in message headers (bmo#1644032)
  * fixed: Keyboard shortcut for toggling message "read" status
    not shown in menus (bmo#1619248)
  * fixed: OpenPGP: After importing a secret key, Key Manager
    displayed properties of the wrong key (bmo#1667054)
  * fixed: OpenPGP: Inline PGP parsing improvements (bmo#1660041)
  * fixed: OpenPGP: Discovering keys online via Key Manager
    sometimes failed on Linux (bmo#1634053)
  * fixed: OpenPGP: Encrypted attachment "Decrypt and Open/Save
    As" did not work (bmo#1663169)
  * fixed: OpenPGP: Importing keys failed on macOS (bmo#1680757)
  * fixed: OpenPGP: Verification of clear signed UTF-8 text
    failed (bmo#1679756)
  * fixed: Address book: Some columns incorrectly displayed no
    data (bmo#1631201)
  * fixed: Address book: The address book view did not update
    after changing the name format in the menu (bmo#1678555)
  * fixed: Calendar: Could not import an ICS file into a CalDAV
    calendar (bmo#1652984)
  * fixed: Calendar: Two "Home" calendars were visible on a new
    profile (bmo#1656782)
  * fixed: Calendar: Dark theme was incomplete on Linux
    (bmo#1655543)
  * fixed: Dark theme did not apply to new mail notification
    popups (bmo#1681083)
  * fixed: Folder icon, message list, and contact side bar visual
    improvements (bmo#1679436)
  * fixed: MailExtensions: HTTP refresh in browser content tabs
    did not work (bmo#1667774)
  * fixed: MailExtensions: messageDisplayScripts failed to run in
    main window (bmo#1674932)
  * fixed: Various security fixes
  MFSA 2020-56 (bsc#1180039)
  * CVE-2020-16042 (bmo#1679003)
    Operations on a BigInt could have caused uninitialized memory
    to be exposed
  * CVE-2020-26971 (bmo#1663466)
    Heap buffer overflow in WebGL
  * CVE-2020-26973 (bmo#1680084)
    CSS Sanitizer performed incorrect sanitization
  * CVE-2020-26974 (bmo#1681022)
    Incorrect cast of StyleGenericFlexBasis resulted in a heap
    use-after-free
  * CVE-2020-26978 (bmo#1677047)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2020-35111 (bmo#1657916)
    The proxy.onRequest API did not catch view-source URLs
  * CVE-2020-35112 (bmo#1661365)
    Opening an extension-less download may have inadvertently
    launched an executable instead
  * CVE-2020-35113 (bmo#1664831, bmo#1673589)
    Memory safety bugs fixed in Thunderbird 78.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1610452800">- Mozilla Thunderbird 78.6.1
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  MFSA 2021-02 (bsc#1180623)
  * CVE-2020-16044 (bmo#1683964)
    Use-after-free write when handling a malicious COOKIE-ECHO
    SCTP chunk</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1611748800">- Mozilla Thunderbird 78.7
  * changed: MailExtensions: browserAction, composeAction, and
    messageDisplayAction toolbar buttons now support label and
    default_label properties (bmo#1583478)
  * fixed: Running a quicksearch that returned no results did not
    offer to re-run as a global search (bmo#1663153)
  * fixed: Message search toolbar fixes (bmo#1681010)
  * fixed: Very long subject lines distorted the message compose
    and display windows, making them unusable (bmo#77806)
  * fixed: Compose window: Recipient addresses that had not yet
    been autocompleted were lost when clicking Send button
    (bmo#1674054)
  * fixed: Compose window: New message is no longer marked as
    "changed" just from tabbing out of the recipient field
    without editing anything (bmo#1681389)
  * fixed: Account autodiscover fixes when using MS Exchange
    servers (bmo#1679759)
  * fixed: LDAP address book stability fix (bmo#1680914)
  * fixed: Messages with invalid vcard attachments were not
    marked as read when viewed in the preview window
    (bmo#1680468)
  * fixed: Chat: Could not add TLS certificate exceptions for
    XMPP connections (bmo#1590471)
  * fixed: Calendar: System timezone was not always properly
    detected (bmo#1678839)
  * fixed: Calendar: Descriptions were sometimes blank when
    editing a single occurrence of a repeating event
    (bmo#1664731)
  * fixed: Various printing bugfixes (bmo#1676166)
  * fixed: Visual consistency and theme improvements
    (bmo#1682808)
  * fixed: Various security fixes
  MFSA 2021-05 (bsc#1181414)
  * CVE-2021-23953 (bmo#1683940)
    Cross-origin information leakage via redirected PDF requests
  * CVE-2021-23954 (bmo#1684020)
    Type confusion when using logical assignment operators in
    JavaScript switch statements
  * CVE-2020-15685 (bmo#1622640)
    IMAP Response Injection when using STARTTLS
  * CVE-2020-26976 (bmo#1674343)
    HTTPS pages could have been intercepted by a registered
    service worker when they should not have been
  * CVE-2021-23960 (bmo#1675755)
    Use-after-poison for incorrectly redeclared JavaScript
    variables during GC
  * CVE-2021-23964 (bmo#1662507, bmo#1666285, bmo#1673526,
    bmo#1674278, bmo#1674835, bmo#1675097, bmo#1675844,
    bmo#1675868, bmo#1677590, bmo#1677888, bmo#1680410,
    bmo#1681268, bmo#1682068, bmo#1682938, bmo#1683736,
    bmo#1685260, bmo#1685925)
    Memory safety bugs fixed in Thunderbird 78.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1612785600">- Mozilla Thunderbird 78.7.1 (bsc#1181848)
  * changed: Building OpenPGP shared library linked to system
    libraries now supported (bmo#1634963)
  * changed: MailExtension errors now shown in Developer Tools
    console by default (bmo#1650149)
  * changed: MailExtensions: Dynamic registration of calendar
    providers now supported (bmo#1652885)
  * fixed: OpenPGP improvements (bmo#1655210)
  * fixed: Message preview was sometimes blank after upgrading
    from Thunderbird 68 (bmo#1653168)
  * fixed: Email addresses whitelisted for remote content not
    displayed in preferences (bmo#1652575)
  * fixed: Importing data from Seamonkey did not work
    (bmo#272292)
  * fixed: Renaming a mail list did not update the side bar
    (bmo#1632331)
  * fixed: MailExtensions: messenger.* namespace was undefined
    (bmo#1641573)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1614168000">- Mozilla Thunderbird 78.8
  * fixed: Importing an address book from a CSV file always
    reported an error (bmo#1685048)
  * fixed: Security information for S/MIME messages was not
    displayed correctly prior to a draft being saved
    (bmo#1683701)
  * fixed: Calendar: FileLink UI fixes for Caldav calendars
    (bmo#1669803)
  * fixed: Recurring tasks were always marked incomplete; unable
    to use filters (bmo#1686466)
  * fixed: Various UI widgets not working (bmo#1690098)
  * fixed: Dark theme improvements (bmo#1691106)
  * fixed: Extension manager was missing link to addon support
    web page (bmo#1642219)
  * fixed: Various security fixes
  MFSA 2021-09 (bsc#1182614)
  * CVE-2021-23969 (bmo#1542194)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23968 (bmo#1687342)
    Content Security Policy violation report could have contained
    the destination of a redirect
  * CVE-2021-23973 (bmo#1690976)
    MediaError message property could have leaked information
    about cross-origin resources
  * CVE-2021-23978 (bmo#1682928, bmo#1687391, bmo#1687597,
    bmo#786797)
    Memory safety bugs fixed in Thunderbird 78.8
- Update create-tar.sh to use https instead of http (bsc#1182357)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1616760000">- Mozilla Thunderbird 78.9
  * fixed: New mail notification displayed old messages that were
    unread
  * fixed: Spaces following soft line breaks in messages using
    quoted-printable and format=flowed were incorrectly encoded;
    existing messages which were previously incorrectly encoded
    may now display with some words not separated by a space
  * fixed: Some fields were unreadable in the Dark theme in the
    General preferences panel
  * fixed: Sending a message containing an anchor tag with an
    invalid data URI failed
  * fixed: When switching tabs, input focus was not moved to the
    new tab
  * fixed: Address Book: Syncing a read-only Google address book
    via CardDAV failed
  * fixed: Address Book: Importing VCards with non-ascii
    characters would fail
  * fixed: Address Book: Some values may not have been parsed
    when syncing from Google address books.
  * fixed: Add-ons Manager did not show if an addon used
    experiment APIs
  * fixed: Calendar: Removing a recurring task was not possible
  * fixed: Various security fixes
  MFSA 2021-12 (bsc#1183942)
  * CVE-2021-23981 (bmo#1692832)
    Texture upload into an unbound backing buffer resulted in an
    out-of-bound read
  * MOZ-2021-0002 (bmo#1691547)
    Angle graphics library out of date
  * CVE-2021-23982 (bmo#1677046)
    Internal network hosts could have been probed by a malicious
    webpage
  * CVE-2021-23984 (bmo#1693664)
    Malicious extensions could have spoofed popup information
  * CVE-2021-23987 (bmo#1513519, bmo#1683439, bmo#1690169,
    bmo#1690718)
    Memory safety bugs fixed in Thunderbird 78.9
- cleaned up and fixed mozilla.sh.in for wayland (boo#1177542)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1617969600">- Mozilla Thunderbird 78.9.1
  * new: Support recipient aliases for OpenPGP encryption.
    Documentation can be found https://wiki.mozilla.org/
    Thunderbird:OpenPGP:Aliases.
  * fixed: The key and signature parts of the message security
    popup on a received message could not be selected for
    copy/paste.
  * fixed: Various UX and theme improvements
  MFSA 2021-13 (bsc#1184536)
  * CVE-2021-23991 (bmo#1673240)
    An attacker may use Thunderbird's OpenPGP key refresh
    mechanism to poison an existing key
  * MOZ-2021-23992 (bmo#1666236)
    A crafted OpenPGP key with an invalid user ID could be used
    to confuse the user
  * CVE-2021-23993 (bmo#1666360)
    Inability to send encrypted OpenPGP email after importing a
    crafted OpenPGP key</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1618920000">- Mozilla Thunderbird 78.10
  * fixed: Usability &amp; theme improvements on Windows
  * fixed: Various security fixes
  MFSA 2021-14 (bsc#1184960)
  * CVE-2021-23994 (bmo#1699077)
    Out of bound write due to lazy initialization
  * CVE-2021-23995 (bmo#1699835)
    Use-after-free in Responsive Design Mode
  * CVE-2021-23998 (bmo#1667456)
    Secure Lock icon could have been spoofed
  * CVE-2021-23961 (bmo#1677940)
    More internal network hosts could have been probed by a
    malicious webpage
  * CVE-2021-23999 (bmo#1691153)
    Blob URLs may have been granted additional privileges
  * CVE-2021-24002 (bmo#1702374)
    Arbitrary FTP command execution on FTP servers using an
    encoded URL
  * CVE-2021-29945 (bmo#1700690)
    Incorrect size computation in WebAssembly JIT could lead to
    null-reads
  * CVE-2021-29946 (bmo#1698503)
    Port blocking could be bypassed
  * CVE-2021-29948 (bmo#1692899)
    Race condition when reading from disk while verifying
    signatures</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
</package>
<package pkgid="af05d46a9e02a5dd7da378b8d8555b0b65f2f52e00ae2ea70b6ba274702d02db" name="SAPHanaSR-ScaleOut" arch="noarch">
  <version epoch="0" ver="0.164.2" rel="3.16.1"/>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
</package>
<package pkgid="689af5d4f43fc48200049cf1a5304c5ea9ecd07edb3da25440bcc9b336ac1721" name="SAPHanaSR-ScaleOut" arch="src">
  <version epoch="0" ver="0.164.2" rel="3.16.1"/>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
</package>
<package pkgid="d4b2cf8918d2a9c7985f245e6ad7813a866a5cb3a0212342e64bfece9f1f2894" name="SAPHanaSR-ScaleOut-doc" arch="noarch">
  <version epoch="0" ver="0.164.2" rel="3.16.1"/>
  <changelog author="imanyugin@suse.com" date="1468497600">- Version 0.161.1
- Added a package conflict for SAPHanaSR, bsc#989162
- Restructure package and the .spec file</changelog>
  <changelog author="imanyugin@suse.com" date="1522756800">- Version 0.163.0
- Fix bsc#1045603: Update man pages
- Fix bsc#1045536: SAPHanaSR-ScaleOut missing update to use SLES python
- Fix bsc#1086545: minor typos in package description and man pages</changelog>
  <changelog author="imanyugin@suse.com" date="1525780800">- Fix bsc#1092331: SAPHanaSR: SAPHanaSR-showAttr fails to open an archived cib file
- Fix bsc#1091988:SAPHanaSR-ScaleOut SAPHanaSR-monitor depends on package not existing in SLES
- SAPHanaSR-showAttr, SAPHanaSR-monitor moved to /usr/sbin to match the file layout in SAPHanaSR-ScaleUp</changelog>
  <changelog author="imanyugin@suse.com" date="1530014400">- Version 0.163.1</changelog>
  <changelog author="clanig@suse.de" date="1536753600">- Version 0.163.2
- Fix bsc#1098979: SAPHanaSR-ScaleOut SAPHanaTopology and
  SAPHanaController allowing virtual host names</changelog>
  <changelog author="abriel@suse.com" date="1573473600">- change version to 0.164.0
- restart sapstartsrv service on master nameserver node
  (bsc#1156150)
- Use a fall-back scoring for the master nameserver nodes, if the
  current roles of the node(s) got lost.
  (bsc#1156067)
- clean up package, add checks, correct typos</changelog>
  <changelog author="abriel@suse.com" date="1589457600">- let the SAPHanaSR-ScaleOut-doc package conflict with the
  SAPHanaSR-doc package
  (bsc#1157685)</changelog>
  <changelog author="abriel@suse.com" date="1600689600">- PROMOTED/PROMOTED Fix - The PROMOTED/PROMOTED values happened
  after the main tenance procedure and the refresh of the resource
  did not fixed that
  (bsc#1176330)
- Improved SCORING and logging
  Score of secondary in takeover phase increased from 122 to 145 to
  avoid promotion of former primary masternameserver candidates
  (bsc#1174610)
- Fixed typos and improved descriptions in comments
- Change default timeouts and intervals to match the official
  recommendations</changelog>
  <changelog author="abriel@suse.com" date="1604491200">- change version to 0.164.1
- adapt man page SAPHanaSR-showAttr(8) and the README
  (bsc#1144729)</changelog>
  <changelog author="abriel@suse.com" date="1614859200">- change version to 0.164.2
- The resource start and stop timeout is now configurable by
  increasing the timeout for the action 'start' and/or 'stop'.
  We will use 95% of this action timeouts to calculate the new
  resource start and stop timeout for the 'WaitforStarted' and
  'WaitforStopped' functions. If the new, calculated timeout value
  is less than '3600', it will be set to '3600', so that we do not
  decrease this timeout by accident
  (bsc#1182545)
- add return codes for saphana_stop and saphana_StopSystem
  (bsc#1182115)
- man page SAPhanaSR-ScaleOut minor mistakes
  (bsc#1144442)</changelog>
</package>
<package pkgid="31bb9020fc1b8b49846d1baab200f2c91d7c3c01733aab4d40d9d77630928d9a" name="SUSEConnect" arch="aarch64">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="c14569ff6ccf20cc4349779a18d972ce0126deb8b8eba86d4eb5edc90a596ddb" name="SUSEConnect" arch="ppc64le">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="96b29c0ea068eb2a2bc7916161a722ea2ffcda191fff7ccd5ee5aa3089ed6eb1" name="SUSEConnect" arch="s390x">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="884db05664c2e8506732204752ff04c3530ccdd83d43dff292af3b4ffd02e6df" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="62bd331fd9bbf335858309f4d92328cd4f782aa0b88522cd08354fa793e1507d" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.29" rel="10.1"/>
  <changelog author="tschmidt@suse.com" date="1569499200">- Update to 0.3.21
  Fix error on first activation of packagehub extension (bsc#1124318)</changelog>
  <changelog author="tschmidt@suse.com" date="1569844800">- Update to 0.3.22
  switch_server_cert_location_to_etc.patch: add patch to switch server cert path for SLE15.2+ to /etc (bsc#1130864)</changelog>
  <changelog author="tschmidt@suse.com" date="1571054400">- 0.3.23
  fix .spec file to correctly apply switch_server_cert_location_to_etc.patch to SLE15SP2+ (bsc#1130864)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1572955200">- Update to 0.3.24
- Forbid de-registration for on-demand Public Cloud instances (bsc#1155911)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1577966400">- Update to 0.3.25
- Fix cloud_provider detection on AWS large instances (bsc#1160007)</changelog>
  <changelog author="tschmidt@suse.com" date="1593518400">- Don't fail de-activation when '-release' package already got removed</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1598443200">- Update to 0.3.26
  - Extend the YaST API in order to access to the package search
    functionality (jsc#SLE-9109)</changelog>
  <changelog author="tmuntaner@suse.com" date="1598875200">- Update to 0.3.27
- SUSEConnect now ensures that it writes its configuration when it
  encounters errors. This helps in the situation where SUSEConnect
  announces itself, but fails during a later step. Without the saved
  configuration, a system could have credentials, but be unsure which
  registration proxy they're valid for.</changelog>
  <changelog author="tschmidt@suse.com" date="1601294400">- Recognize more formats when parsing .curlrc for proxy credentials (bsc#1155027)
- Add rpmlintrc to filter false-positive warning about patch not applied</changelog>
  <changelog author="tamara.schmitz@suse.com" date="1605614400">- Update to 0.3.29
- replace env ruby path with native ruby path during build phase</changelog>
</package>
<package pkgid="6ac7bf42b68c64cb01b22c1357376fb57357e29225fcd4fff44aa452286662c4" name="amazon-ecs-init" arch="aarch64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="3d05ccb7f44d4fd62a13686c7b3dd495da1ac360cd7adbe55138505dd822c7f6" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="2a4a9511eb7dc17fdfc1b4ed30a13a98ead8a925ce61436836679e1ebae83103" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.52.1" rel="4.8.1"/>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
</package>
<package pkgid="2dd8bc9a1b2a884c1650d01340ff4c9ac660537f304b49011ee833724d11d6a0" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="aca8aa127613dbe6aa2c29d696f51c743a0f8fe48bb47e416be0c4256252e247" name="amazon-ssm-agent" arch="i586">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="8cbb45b83a80a3b12dd82d37bf5bde501076c43442796ccaf2babf7c38771687" name="amazon-ssm-agent" arch="ppc64le">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="32eba959605faee26539e203fb3150b06797a2165437757f625cf95c0253b22f" name="amazon-ssm-agent" arch="s390x">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="bd447a675ea87a62370e4953cf45741deec7c61de1be37568d659ff90ea71a28" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="15c24d9b5f8f5c2c554b648ecdee78393d267c14bc327e8096cdb0bfc42aa1a7" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.0.1209.0" rel="5.6.1"/>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
</package>
<package pkgid="48bb4530588146e8d3b43801822d0e1f71513b2365dde930b96847f23f2a09a6" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="35e446eaec9334836bbe34befe3fff13c03b8620a71a6c6d4bc809a4432b5ae6" name="avahi" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="e8a8d4471f48cc7aa1e85a67257be5782ab6eff5c20f5bfbfb7a4467f86faff5" name="avahi" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="245fa62bfcbac417c13f1f0bc12a40a3aca018c448c35a4023e18612e03d22f4" name="avahi" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="9f7cd20ec4f1a3dbb3981fd7e974c5a86639273bc024f7241d776daac93621e8" name="avahi" arch="src">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2919886fe71397ec06713cce4b987c88154a8511d0789bbc119d5774e5c8d46d" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="3f2ecbe72f8cfd29061c3373a7d86d318a212ddcd40c722e69819039cb780032" name="avahi-autoipd" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="bf8f100d498c7f38617ef13b8e96c11563509e14cd0942f3fa393760cb652a42" name="avahi-autoipd" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="a523bd83811e5ea12a8a335ad528daf5c7877d4a6c5fe49da38ed35fdc8f9ced" name="avahi-autoipd" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="d79c59afe46638d6ae19100620d9b6c2b5078748c4d029525879511b9b31be4f" name="avahi-autoipd" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="3b4fbf243ab9074d3b50ccaff89cea6d5ab8501c1ea0d16baf07e9b9f2721b4e" name="avahi-autoipd" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="f00f791781d1ef9e5460939e5bc74b0507f927f6b1b88c90aeb53c09b59da11b" name="avahi-compat-howl-devel" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ab218de2d64ebbf1ee542794b59133617889801104613a8a7589b80a62296498" name="avahi-compat-howl-devel" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="302044201a7033de181a7ba35430a0f999137a96d7df210e019dbb34a88246d1" name="avahi-compat-howl-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="12d6b9c994445b4643f87452b471041392914978e3be272acff53c83b5463ea3" name="avahi-compat-howl-devel" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="e6ca5c7f528aff4d4a84e2fe5ed8af938e226261e45deaf289daf64c6f609430" name="avahi-compat-howl-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="80017838cd74ab54020180a49055a57f4a83638ae8e5dd8a03442f3a82eaeb66" name="avahi-compat-mDNSResponder-devel" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="59021c8c13ec6b5393ec927034a4e8c36e22334d7010cc72d3240c2d7397b7e2" name="avahi-compat-mDNSResponder-devel" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="56f1af8e269552bd31c40fa41871e49774724e86c94026e1d40317e839546832" name="avahi-compat-mDNSResponder-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="9f437552c32a56cbf24059ef73e020547b12d4d56c7d1a68dd5e83dc562b4a02" name="avahi-compat-mDNSResponder-devel" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="613011f98b5e464cd428d3de3b311dfe6758d527254147aaa6f0469a22e83d2f" name="avahi-compat-mDNSResponder-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="10865c5181fcaa0f027c11effff1285e87629b05dcd077f2444db8d66f60255a" name="avahi-glib2" arch="src">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="67e69850db8e0d7f233e9d8709435e5529a985ce35ab9ce27ffe7c73555158b0" name="avahi-lang" arch="noarch">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="4da7a23754679a4977b70e335d728d71cbdb7176c7dbdad6c57a18ae573904db" name="avahi-utils" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="94215039d1dbf5af4009981c5c0c11597a077542e41b18bddfbbc3731061b0bd" name="avahi-utils" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="075b384270280bb7ec7c1f242eb8fe3ddfb82fc4879cf015125f28cf15a3b244" name="avahi-utils" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="6953988a903105a0e6a843efb01d2348a51b687a0de1575d37c5d661fad6a3de" name="avahi-utils" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="3e5d7c552a12098ca7f812d59c93f4d89bd28f61d17a03a4b357fdc283f6102f" name="avahi-utils" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="0c3837c1ee1f5ca81554d4ea31c799e93dba14fe7b6af282cdaaf9cf8a0bf2c5" name="avahi-utils-gtk" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="8bd8cdffa14e07166327855241f6a100920cdc8820b6d8a8299f9d2f9eb92c79" name="avahi-utils-gtk" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="8febf9467766b2374add71a7be06c573bdb9307ec9cbbf0e67a7db5aae876552" name="avahi-utils-gtk" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="2ac629b0f6ed98057eacece94ab2c1acd03fa2aeac9ee7049c54b428ce4acb06" name="avahi-utils-gtk" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="0b03ccd221e53027b4398fb7c130502fb69608471cc60fe7f558ab85a8efb13a" name="avahi-utils-gtk" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="015ca479d8ba100641b1569534cbefba1316e128f18617aecde60a7440fc148a" name="bash" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="e663254495cd33b25527afedc9980ed30035d5bb92c6b2d8bbf6f93d4d53b94f" name="bash" arch="i586">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="9fb97fd71b407d21d10854f336fb3e7ec3b7d7915a9309ce862c9c80b645bdfa" name="bash" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="e8d77dfac449aa91e462a4860fd73b5ef9e0711f9a69a98cf97f2756d90e56c9" name="bash" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="83401547c54c4dbcba477ee00a1408f1594862ac73df07f7982b59942d467cd3" name="bash" arch="src">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="a73af5591830c8f75dd02477714ee709e697570e40de22a73c9be802404cfe15" name="bash" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="c754181fb41c2142f9bcdfbcd1d47c52bf04880e942493375746a803aa2b5e15" name="bash-devel" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="640825ddb3b85854db25e70069015100c8c234d70814d054d8a1c59a3674a26c" name="bash-devel" arch="i586">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="b8f94a1533827990d3f3a51103d83eb85b613de056e386cb792a13da8e893fce" name="bash-devel" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="53a03c5012fcf95d3959d17015b82cbe3edb6f425c3752f96cad1a3426792d8e" name="bash-devel" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="d3be6215c5b5a6423770dd97faae7bb294405b952b146931d30f116ae8f40e50" name="bash-devel" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="b18e9bd78fc98788eb6a8a6a733bfe9d89dad4fb0299eedbf096f0caacc53ef7" name="bash-doc" arch="noarch">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="88d845b7b7e03b470cd6d077f0f663be4b079397b74dda007930626c971ae34d" name="bash-lang" arch="noarch">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="b70462a5366bfca4c2abd9d9809f1927cc61ed7b93367f19b213c9f4ab6e4a36" name="bash-loadables" arch="aarch64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="6e96ade582d749847e789da025a7bb63579127968d3e09e7133d261b9366a1aa" name="bash-loadables" arch="i586">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="dbb32ea4d43a59af77f814965531fbd40fcf1f965801aab14d48dfd06ca2b679" name="bash-loadables" arch="ppc64le">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="2b62abd8722d2a26bc7a705a34b5195c28989d8fc88033f56fbd76c04538d27c" name="bash-loadables" arch="s390x">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="4ab5a0f1b23bbf28a68acc8a35773796d4bf701d003b51018badaeb42eeac44f" name="bash-loadables" arch="x86_64">
  <version epoch="0" ver="4.4" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="91c123a953ff89753d3f9dc69bda1322e59ed2a4fe268d666fcd87433d4e4b84" name="bind" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="19b555d64d1c268b8cef9847a779c0f449cd2f828993826130fd7b253cf36b94" name="bind" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="92b1650b623c81260bbaa99e3187cc4a5fe6b9921db21d4cecfd76066659e234" name="bind" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="23f8231fc5dff05bb9bb7b56716eb96816f71464208b537cb0eff7eef3141735" name="bind" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0e642b4545859ce271199024da0749a0653f14b26e21e5f6055835fe19cbe6a1" name="bind" arch="src">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c37982afe149007feab2788cb9778043c096fd0229b4d80fe81a04989e264145" name="bind" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="bb8bfb9db160da355aef00a6a54e10490f3e2c700254ec19c970359f6d820f61" name="bind-chrootenv" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e4c025858bafe3ba93bb2f0a82633ef520b30d054722357a48b9333c823abaf6" name="bind-chrootenv" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9fd8f80ebae78b0f193f8073e27e4615dd3f99a5e05b6f2dc7d7dd69f44011be" name="bind-chrootenv" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f4b7beaef57298d5622d81fc0c1a0ae6dcb0cb930394a287c3193cb9c6751c93" name="bind-chrootenv" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="8948cfdd5e1950546e768d2fa89f1cfc6f3c41129b115fc3b00133516c41cec3" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ebc1bc401f8ffec8168b168e85ad137aacc578ccfa0262178b2af9781197634f" name="bind-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="5cbf0f9d5e4b8ea78d6448caa6799f07b254447bcf344df510a2070e07f8bfac" name="bind-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="6e474dc867012a6df2fb7de11dce34154aa1402f3b8bf6cdac1de937a64b480e" name="bind-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="649cd59dce9f57df588b9b25a11bb379f3f5ae0ed3d18dcdfbdf49cce9893d91" name="bind-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f006393a721aa2cee00cb31ecb81db64721ba9d519adf4080a4f8277032a1b5d" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="eb0c7c62d42f44ed4db60076997df235e90d61efe127eb0ec0183862f7411374" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0efe2837903ae5b41a0f7272b04befc385862fb7c81cf65d3192fdedc626980f" name="bind-utils" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="75ea9077c64141b6909b9d95835cf0ed0989d7425fc1c614ced0eeeaa1cf5482" name="bind-utils" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="0966b43260dee81b19e9257e8769e9fcbfa3385646809903868524af48a3f13a" name="bind-utils" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="94934f5cec0e7a7e1ad4330c91038cacf9f44725a7ee4f1af9f1e6e7b1474797" name="bind-utils" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="61acf4365cf2f01f0b179ee59671e71fe276fe5df4238eacd4a993feb0db343f" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="591f812b7ae689c51fff781d51a83849a55e335789ca4206e09515dbb47e2f5c" name="bison" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="0234642adcdfc0773a40fb9475613d71a4253e68dde88538cea5a7754f881d97" name="bison" arch="i586">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="2a902994b2280a80b27b8214a9303580cec0ae621ede5c66d150642911a3bea1" name="bison" arch="ppc64le">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="94af3cfe7026464d1e8e625c509be63af9107a787e7f7858b25b39a1ed672ff7" name="bison" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="8a9a21df03929dd532a928b2b0d566912e1b8cd88a7993eb159f18b7f1e878c5" name="bison" arch="src">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="4dbd39cd88fff001abbf11f3f50eaaff513255bfc0774faa77bb18e31c93db68" name="bison" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="ecbecb5581fe1f7cfd9276954dbfff9254adeec7aeab0341525f99e03ecce3be" name="bison-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="e0f34ba751a716b3c8f4c46185df15a199a9b49de7326c7c60149a7f70eda0a8" name="bison-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="eda20c4df03983651f9a39cb8794afb4e63332f69edf3d340afc67f630870c48" name="bison-lang" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="3.3.1"/>
  <changelog author="schwab@suse.de" date="1373371200">- Override broken configure checks</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1375531200">- Update to bision 3.0
  * deep overhaul/improvements of the diagnostics
  * more versatile means to describe semantic value types,
  including the ability to store genuine C++ objects in C++ parsers
  * push-parser interface extended to Java
  * parse-time semantic predicates for GLR parsers.
  * This is a major update, please see https://lwn.net/Articles/561990/
  for all details and backward incompatible changes.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1380283200">- location-eof-check.patch: Fix broken EOF check</changelog>
  <changelog author="p.drouand@gmail.com" date="1419422400">- Update to version 3.0.2
  + Generated source files when errors are reported
  + %empty is used in reports
  + When C++ variant support is enabled, an error triggered via YYERROR,
    but not caught via error recovery, resulted in a double deletion.
- Remove location-eof-check.patch; merged on upstream release</changelog>
  <changelog author="p.drouand@gmail.com" date="1421928000">- Update to version 3.0.3
  Bug fixes
  * C++ with Variants (lalr1.cc)
    Problems with %destructor and '%define parse.assert' have been fixed.
  * Named %union support (yacc.c, glr.c)
    Bison 3.0 introduced a regression on named %union such as
    %union foo { int ival; };
    The possibility to use a name was introduced "for Yacc compatibility".
    It is however not required by POSIX Yacc, and its usefulness is not clear.
  * %define api.value.type union with %defines (yacc.c, glr.c)
    The C parsers were broken when %defines was used together with "%define
    api.value.type union".
  * Redeclarations are reported in proper order
  Documentation
  * Bison now installs various files in its docdir (which defaults to
    '/usr/local/share/doc/bison'), including the three fully blown examples
    extracted from the documentation:
  - rpcalc
    Reverse polish calculator, a simple introductory example.
  - mfcalc
    Multi-function Calc, a calculator with memory and functions and located
    error messages.
  - calc++
    a calculator in C++ using variant support and token constructors.
- Split out translation files
- Pass "--docdir=%{_docdir}/%{name}" and do not perform %doc anymore</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Add gpg signature
- Update to 3.0.4:
  * Fix a compiler warning when no %destructor use $$.
  * Several portability issues in tests were fixed.</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Set the installinfo in preun rather than postun to avoid ugly
  warning about file not being present.
- Remove the Obsolete for old ppc64 support that won't get triggered</changelog>
  <changelog author="tchvatal@suse.com" date="1481716800">- Update keyring file to not be 38 MB large...</changelog>
  <changelog author="mliska@suse.cz" date="1481889600">- gcc7-fix.patch: Add forward declaration to compile with GCC7.</changelog>
  <changelog author="pmonreal@suse.com" date="1621512000">- Fix build: [bsc#1183777]
  * Adjust to the glibc removal of libio.h in 2.28+
- Add bison-glibc-libio.patch</changelog>
</package>
<package pkgid="819ac12f4f1d233eaabc8eb177fac3b4fa10df68357cba1d12fec6904d1fd757" name="branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="bd3b519ee55241664ff862000c3362a1cbdbc94ced826f1fe8dafebe1ddb716a" name="branding-SLE" arch="src">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="020a566425056c90c83fecd8e125e503bda339665b7d03014844859a8c1a22e4" name="ceph" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="842616d2732378ddb3b4c01b57354f6464e1224dc3ca5fd8a959e73c3eddd4bd" name="ceph" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bbb41b9a98bd6904355913a0e3d1c12593e933d00ae9ad3b50978511a384f7d5" name="ceph" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ada9f9ca4445e8cff6c9dcf86a8288f236f5ab8e3cc44ba6a9c8d8cb9b72dc97" name="ceph" arch="src">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6b407802a41d53aa198f8b8fe19b3f9e6ac1c942be148b7a4fb79a151c47da6f" name="ceph" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d497fecfb99be71bfdfce72b8277d2c496ce82b70b1fb9627914c586aef93a54" name="ceph" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c648ad31c684672abb59eb5998f9edfce411cd10bf2adab11807c7f6eb69c67" name="ceph" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a4ef0c10d5d59211861a4150feee759773febcf5d4fc16e8a9d3df4e1f603d5e" name="ceph" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae94f247135551828ab8e815059098bbbb33d4df0b8fbdc74e60d715fa66554a" name="ceph" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c4741ed744a9af710487e99a514f51645778a7b6b3745eff03e8d180b5c144d9" name="ceph" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e08e1416ad31c668b60b81d640c39177cc94bad02abd855eaf70a02082bd57b2" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2c0348021445a35b19a5c6e444f846c6b7c23e0e6accc5be183a18461e2da233" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f18f3132aefbfb765be59064caf0674c0a33dc483edbc59517864b680ae41519" name="ceph-base" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ec849102c9f98bf80ccd6d6084a86e6ed4eb5fe5c4267512887d48a92242c808" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d3c856df5ed6cb3e060dbbf2c43becad24ee94dd79c36b917e84144b6398b2f2" name="ceph-base" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="583b0aa56bf71b4edc17d77cb798325189f30d0a35d5e3d8cedc6309a03d869b" name="ceph-base" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="58352676522070ccf35113093851a1849e1dd99a70ccc4ea05fd76b9213509b4" name="ceph-base" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf8ca10556c6e783c2d1373d718c11a417e58088ea50648d40dc9cb2355e867f" name="ceph-base" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="afc12ad263a86fe2b529d253937c66d58e71fdc1cc4925432a7dffb5c8ddd1d5" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9cecc56869735129baedc5aacdc1f4ab1fca4fd952ddc15ed50b7126e6fe7ee1" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a988ee9a75281c5ce6e56f1866d0c9351e31b84d81846803a2e42db97f8cfec" name="ceph-common" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="76429eb23344aaaa5c6f15856e488060e74536a8a2456a0d4ddf3ff16a735591" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d8f7dc3be048989466723ab64ecff1fd95faaa90476d66c61ebdae963530a994" name="ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff43a824bd29d0746c97ff158f21d152a9dec650c1735eb77755f9843929396e" name="ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ad4e9e531059f0c85c3e9b4432b2d6771a8c71db0bd18a1b320c9ffa203db751" name="ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f179935aece025026b57eb963482d42c70322a16389f6f9c433cbaff920f8a0b" name="ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="51d8412d9ccad96fdecd01939bf13ffe15aa58768d3130555d030433e3cb075d" name="ceph-dashboard-e2e" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae27aa2ae8f8a71b7d70fe34b34e84d97dc1b40a1fb4c24b2e22c599abaa7cdd" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6b290f30acc017e00547c2f4ba05c26b75048eeb958026eea5da174250cfd785" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="565553fa7ab2c9a4a47c65f0e373ea3805ea54712ce177d111e1e8110c911c77" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="70e7f143188b95a986accbedce7139a840f60f15e410c2ac5edc366bf1bb8176" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ed0914062c5f34ca402ba59ecb4a712627ca75f17b0ba41f9a9268afbeac1ea" name="ceph-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="842f02862bbf2859e22a751636241f85b26d70c7cf888f91739790d66fe2e616" name="ceph-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6a29026ff365d03ebefbb17537afb2a99b536b4563f916fd127e888f6dd050e8" name="ceph-fuse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0616840d433d9e4ec48373680cbe8203373d9bd302096c1c3e3e028302342e0c" name="ceph-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="11f2854a199536ae069c988a095376273340b7cc2b9c92824d8e0391edc209c7" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2a6fa905cb0ca91857d35415a3702a4c53d4acedae461f88b41fb3fcc07d548c" name="ceph-grafana-dashboards" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="edf7ee77a7e47deb0e973882868a5b7cf1449990638074d73c145644ffa0645e" name="ceph-immutable-object-cache" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7d764e6cf6b3ee7c64efd57db6e44aecaa4232901d9339ad7b79a84cb46064c" name="ceph-immutable-object-cache" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ac1a2848341c807a481dbf46fcc51772b90ff0cd45c0284da9df0601088e7844" name="ceph-immutable-object-cache" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f3d23b7e5ed2662ae6a95b7daff4a7f75c64e7686973b560c050eaa6dd8fde72" name="ceph-immutable-object-cache" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0b452445525b8d62055e27acaa0236cfb450e55102c5cd1a4d41acedd3ef9cc2" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8834fedb8df2de59307598f629f7c41206c065768fe92b6781572eaf07f6c34c" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="596138256b3e358ca900406e8f97ba9f7562c68386e877e385daa237e7bba827" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="00ae480d89c40240bbc81e399d8cebfe94277f0b076370b79301fdcb742a14ae" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4be275e97b4bb9a84021f867b4b2259890d79cd667ee66eeccd4c3c1b0a158ff" name="ceph-mds" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2f6e0e895b98be8474e41f687179f69aaa2de9243a7920581faf1a90dedd9708" name="ceph-mds" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="756f0e954632c945d36d1dd7d90cf1e120a05cd87bf4ae1a2a9b7c81db1c16ef" name="ceph-mds" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fb7cc53aa2d3359dad1f51c137550c3abfa25bee20785bed0a14e2ee76eb1d19" name="ceph-mds" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2d427d1e6bec3a778973578e8790ea7a06d2e5c7429a2fc06aa3fb55447e83f6" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="148578bb823c597cc2cb7a7572eed9f71ef75d64b163d94e07e1f49a2449aa11" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59868945ab2ba541992df074052c73501b8281b7ec4cdc14f38766807c8acbaa" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae892ff655fd9e6aa74a03dd895e6b4d411fdb6bfa4ba46df59e56bfc6b02ebc" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9c47f82645b0c982b94f45a2e0b6815b5264a84c8b5829be814c1e45c57e6c02" name="ceph-mgr" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4b1e0dc9acc08eaf9802088d98c5b31e9dc1a09c5f6f8e3e88e6dee28766f0ba" name="ceph-mgr" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3c0a81a6efde0f6a5a0b916cf7d64d15b716f94cde31d7262fbca5e9d58de0e8" name="ceph-mgr" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0e13e71326dc905f27a4bd50adb07f084402a7f52e2122aac58d41849789862f" name="ceph-mgr" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ead20acf9e3cb48a7516465bcfd216cbad765f3ca95ecc61f60d033e3af35a0b" name="ceph-mgr-cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c64955fa99dea4639dff4d1d8cadf20e001e05df7c79c1c1b8d2b3827a3afa3f" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a2a82a1762fd9358b8561a8759f3e1ad50c873bd6c0d8d9a981ea6b0b38abc1a" name="ceph-mgr-dashboard" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c7a03cdd260b12a052725d9f5fefcd52478631b15733071b7f3f4f26b46e1792" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e4744a1675dda73fd566a5ae7cb4bef06c5dae1082174951e65aeaae3c797af6" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3009f1ae86171d0fbff3f8b2fd5d4247601653dc09b46c0af0c687913e65966b" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="345b4cad61e13346efd7874c6570a352bb969f0e6ad53201a71bbab809a33fa9" name="ceph-mgr-diskprediction-local" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2f96a1ffbe148b9489540ff65532f3b58b4e5770f3cbccb8c819bc2766132b55" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="858132db3f8fcb422e0eb84e2936f28bf9f504266927ac7250e9827482e9777c" name="ceph-mgr-k8sevents" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="18a6896b3c69076ec1e14754151f35dbcfd494a151bfde2055929177e9bdf22b" name="ceph-mgr-modules-core" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc82fb7f4624cf667043e58f0e458daa2bbf1d31f9d1ada0f24df8450f3b36f4" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dce5ad28e3b3cd093b592526b89693f9371442accfdf15fef70822d112144d70" name="ceph-mgr-rook" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="076b68434d31ee26bde4426f8706c7ba551380353e52459bcb078a9a9353ab97" name="ceph-mgr-ssh" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4e32a24c4b0d39fd526eed4d9a10aeb9c4d83270f1579f0bd5e35d99639cd3ce" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b5fd3ecb9499bfd5a83256cf09586476988d8d07cd4ba11b0c97cb7a102e39f" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8e545f34baa01fd06e1cf033be83799e6fd9e16c2b3124f38b487cb2f7f4e9d2" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="411dc66eedd63a5d140903104e44cb5764b529749a04ad601d02f322c142f24b" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b1d8658e18e9588411b73f8c683632059e64118d3ab9b85045c5feee961554b4" name="ceph-mon" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="07963f6051dce5a58bb6e9f6af2246de136ef05e8608b868939e2aec299c6ffd" name="ceph-mon" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="338f81636019883290222757032d2a467afdd4bba1540672d29e487a99ea4c2f" name="ceph-mon" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="762e9e52e7761c1e7a6f37e21e34841c15991125d826a1b8a0ccd53d78887024" name="ceph-mon" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0d14403660f63375e9c86e29952ca0872c896981d73f3fca8113fb622037726b" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cba270af5235fc074d8300d7786fbd771fbf1fe92875c6ff4b9d04202b7cab4e" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="88edd701d744c0886912e0a520e7731a2ae21021a5e72b4ea5bb23f0f737c686" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d062a66561f66244b919d87101e8b6e42e8b725716a3f09ff508eaeec979eae1" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0d4f6756520527c6c76e6620deebd49648ee8fa4ebee4907b5322f2b9c3eb9fd" name="ceph-osd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="93d6891042a102853422b645faa1410d748c93f1d78cd2b4d12569c067bd3520" name="ceph-osd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a3f06c075d210d6e21eb4aa59d02b4af14d2e7fca678323009850c0a6941dbe" name="ceph-osd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="06d232b921bc29b0ad941ca2196fa317f90cf878071123543856c9e1b83b8ba6" name="ceph-osd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a4a8972848fc8d09c227aa22c6b114c2406d58023940c5796e06fceea96d343a" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b6ed354071d392fd31651d2c37a77f6ea8cc54c4584e1c7761d97d239a33f7fc" name="ceph-prometheus-alerts" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5df5ae23bc10ba3ba8e2e30071e09e9c5682474b2fa24448ba02b66337278216" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bcf62d4917fcc1723d5efb791a1b4d22d1104a3132ff47436e88e9a5c0e95a44" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2d09a354a9a1813f3337e6673f96d7dc83216fb95b4d243942ec4f081c3f2796" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c797a381146f4eeb715af945e6c03fac341c304effde60f6bed0f6d6addbe555" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a1f30998e870c778604e664b73b5fc2014757836dbc94d3be212b39e42f9326c" name="ceph-radosgw" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e7cdd64c7ac0d2b720f1ff6a74501b79c22933ca2d994b78d2a18dd40fcb1083" name="ceph-radosgw" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e28a5a185a15b5845abd91e6bc93518d8c5183eac47e5f2fb5428c5b029eb7af" name="ceph-radosgw" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6adbca70826bdf3641e934448d8cd63f4e53dadc24e9c2c5c0dc0c744bdcf598" name="ceph-radosgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ce09edaaf195957527d9bb49760032c5bbcd0cd84e3f3eaefc584d973f5f824" name="ceph-test" arch="src">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="691be495545821fa980f38f25c35a6af4bb207e356296cf5ce7cbfaba8a5052b" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a302359d59603e03f4e95b457795d55661bca8b4661c33858873008831c769b1" name="ceph-test" arch="src">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6766ecd41fdf367943d70d3e0a88b5320d4d3909ee591e298b28a04df2a0a8b1" name="ceph-test" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="900a292ae8ad2685b1fa97db8831c41125af2d8695fb37de2f147a74c8f6a5a4" name="cephadm" arch="noarch">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a933b233f6398478f075299a0f71fcb25833b3a96168edc2568c386e9659f546" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bff42b57f6a27ac2ddca2bca2ec4d854afae297333a213a53016889282d2f15f" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c0029745d81281023dc361258209ac962161ebf8579b96aa98792315280340e9" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e5a745c9eebfe65aa72795cb40e01a78a4609a7a7718d45cdb0e7cd5b97d1aa7" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ffeface111699ef28558326b5fb26a01a5749382ad8197d70ba9b2c65d3a6e8" name="cephfs-shell" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2ae3fbd82c137d9ddb62c986706dd4530b9125f6516696149323ad749ee1fb9b" name="cephfs-shell" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3920626d14c89571ac37536a458a083d8ab0e4fd818d9ba8af7191fef867ecf1" name="cephfs-shell" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bc69712ccdfdc24200cc783f867a326bde5ec6d3b8007eceab2ded2f17d0ff0b" name="cephfs-shell" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b66252378d298f917e94f02566828479cbde91b21ce6207edbf8b5c0d2b27655" name="clamav-database" arch="noarch">
  <version epoch="0" ver="202106070027" rel="3.468.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1618142400">- database refresh on 2021-04-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1618747200">- database refresh on 2021-04-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1619352000">- database refresh on 2021-04-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1619956800">- database refresh on 2021-05-03 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1620561600">- database refresh on 2021-05-10 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621166400">- database refresh on 2021-05-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621771200">- database refresh on 2021-05-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621944000">- database refresh on 2021-05-25 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1622376000">- database refresh on 2021-05-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1622980800">- database refresh on 2021-06-07 (bsc#1084929)</changelog>
</package>
<package pkgid="c451836bf6e9ec337c4789511d6a1f1668cd02211ec1099b662c874b69990bab" name="clamav-database" arch="src">
  <version epoch="0" ver="202106070027" rel="3.468.1"/>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1618142400">- database refresh on 2021-04-12 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1618747200">- database refresh on 2021-04-19 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1619352000">- database refresh on 2021-04-26 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1619956800">- database refresh on 2021-05-03 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1620561600">- database refresh on 2021-05-10 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621166400">- database refresh on 2021-05-17 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621771200">- database refresh on 2021-05-24 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1621944000">- database refresh on 2021-05-25 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1622376000">- database refresh on 2021-05-31 (bsc#1084929)</changelog>
  <changelog author="maint-coord+maintenance-robot@suse.de" date="1622980800">- database refresh on 2021-06-07 (bsc#1084929)</changelog>
</package>
<package pkgid="29a519c666fed99523346b5fc66717377d3e1bf6eea54e622e63982d269b7530" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="47012ac1053ee6960a82bb81c5c55827a58ad0809d95d507a48633d613b04e3f" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0c8714ea0c53d111b930ca76ff654f791143687ee141511c13141d8139209a49" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a16108eed368cdb554388f97b9b51d0dcef71e20df673505752571a2d66b7128" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2263c89c7ac15a108d5fa430285671003e214b2fbe4e328cf5f6f63d0fcd6ab4" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3ea2db596de590d185473fd7a0094bed7e48196797b24a85b81011285e1b14d8" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6e819b03a559263f5f2199f5890fde2c28b4c5dc0d89785fffeb8a465ec95b25" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a2ab7cff8b2daad302e412937c4b65d612ed715f43baa2b6a05840387ffc63b0" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="750be959670edaafaa79e7374a8f3eb83b3f753b23c74293daa876efc36cbd89" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="537a16708dce08bc9e92047304e278bafd55bdde51e22dfe4969d3a95b271418" name="cluster-md-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="409de02ca0d7c5d8f0856cb288f4bc21c62525f11dd034db47fac80e786006fc" name="cluster-md-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="26d1ce735db128d8bd61b6dff5dfe6a954da4e61ceeb6eac041497463d250f84" name="cluster-md-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="35718d299f9a00a2f7c075adb9a9034e1c2df6fe3029d49d83dc65447ff6635c" name="cluster-md-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="85a0b9af9268b3ad8873e562357a7d25c73d0110805f46774eb0890fdd2bc8a1" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="29cc6138c1adcc3b7785e61d3e46608b019dbcfd3c7eca30c34ffc02d3a4f5fb" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5ed1b593086b69ed72e12a9738da56d531a18f92fbaa983c4cc987fa7036cf79" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="442ead77ed15b3e9b9364a82334d0b4cf73530991bee13f2ba1005387baac0ca" name="cluster-md-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="a0a5270f3eccfd47263b0da3add4423e92d367fa5b6a3079763735ef4bba52a3" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="58e132af23708c3971acde17cee525e5b11cad14744b50997641340091a5d5ff" name="cluster-md-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="96b538029faa86b7ab74b0b36eaf7a2f6beffc868701871e2877f1a7c96f6cba" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="643e3c04558d1ced908b0ef2344648af4f80e08c88b9d6b06fc1deb8a09c1403" name="containerd" arch="i586">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="86100c96e1627794c7374b7aeebf14d797ea8c0c00836660e47de3ab285dcd94" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="ea8f06d5996253028f6d494c7b5e42b559c45390f654038c2f24f2c71dfb7cd2" name="containerd" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="08cfeead8db3bc78e28e8c5c6d5559686d5cb5ec60f599f4a93dc972449fee69" name="containerd" arch="src">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="eabcdbd1d0fc669c3475c63f02f979b3e281737bf1241ea421ca4d2b4d86431b" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="144fcbdec4436a36d25f37d705e7ea5d2b01501491e55ee8fc040a26ef5a917d" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="4caf29e1f07122fed243a7724f75ac19ad6865a416b95a624f4eb55ef64ce3ea" name="containerd-ctr" arch="i586">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="06ec9b5244d5330e39e4d20aacc3cf854f84e2b3477b45cb0304630547e2d004" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="6daef601203a00d4c038bf26272f889e6d5dbfed37615b030daa80d76bcb0f90" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="ad90b67ccc792b680e663e9248bd675d70d7553ac3d406c8b5d551c65ea7430e" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.4.4" rel="5.32.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
</package>
<package pkgid="d5735e5c1635160fc64cd8755943ddc75c15d5e6f76837bb25d71030dff0c5f4" name="cpp" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="dbea804e2f06ef8ac72c27539d8f2f207501cf30bbeeba6a0238294eb35f4b94" name="cpp" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="9233ae3a335b2132ddf7d75693ca1416a2d34bb840b5b8f8baf383523bd1ebcf" name="cpp" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="49398aa7d55893bb47f09c9d6f8d8919a62838057144320f270a3d2ce69fc1a2" name="cpp" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="980aa013f1973bd3585afe0802e6ec0fdb9d7dca03b60dd9f704056b1f78aa07" name="cpp" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="e53e0b0c96fbba03c6a3fc8b19967b3ae9c13757e6ea0f6a18243e460e8510ae" name="cpp10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6035202f6e7280816c0c5ab1273604c67ae93fc4c9ea0f49c1f55502e26c70e3" name="cpp10" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af4f7c1ffaae6824b9a99c67e8cdd3a3121d79e29f125adcd724b41daac8a743" name="cpp10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9f1ba442fc57814b7317375ca1f1f56af0c100d67a923e440ec70b563df966ef" name="cpp10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="154daf68c1602511cf8db63e5af58d278d083ae6259c7c4969b450ccb0f34356" name="cpp10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8276212cd5f093ca8718b48ec625753d7da6c9ea4a1880321d54d15eea34aee3" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="d5715f5a196cfa6ffc237fba8d47559672dde6bde49a65954ccbf69fe1215ca8" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="1fd46014ff2ac2d052b03bc1b87e5902fa4ab2ff8a0fd360fd11ff76cb84245b" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.67.2"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="7cb0af93cf1c2b13ccef1ff431127ab669b647e49927a7bd2f11228fec12c682" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.67.2"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="3c610ec978fe8e96c4bc37c0be54607d63b2ed334f58ec04ee0c7a5cfef7da1d" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="9e0cf2925ef2b80e6bbccb939c33993311cda243fbc1629adb001a1d1bf28d12" name="crmsh" arch="src">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="aef2a8f6a4820e9e16a491f261ed61ca0dd797061628a224b6b8c41128206b93" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="ce575d879425b20755f7a592db968566be934f94cffeb077fae64465add4b935" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.67.2"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="c947c9a0461630667961f2aca8a64cc1c67845c3d53301a7d4ee5c0b35e4afb4" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="fd261e49de2078355eccc57ea2ce28aa1fabdd940bb53bacfaa4e6c8d7b0e1fa" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.62.1"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610625600">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="89f7332449ab07aba0b2ebc8819b7d8a65e24c927260abbd492092f2575abf1e" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="3.67.2"/>
  <changelog author="XLiang@suse.com" date="1601035200">- Update to version 4.1.0+git.1600931231.b9c8441d:
  * FIx start_delay with start-delay(bsc#1176569)
  * fix on_fail should be on-fail(bsc#1176569)
  * Low: config: Try to handle configparser.MissingSectionHeaderError while reading config file
  * Medium: ui_configure: Obscure sensitive data by default(bsc#1163581)
  * Fix: hb_report: collect archived logs(bsc#1148873, bsc#1176441)</changelog>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.1.0+git.1602227275.3d680577:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1602331200">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Upgrade crmsh version to 4.2.0(jsc#ECO-1745)
  * Low: bootstrap: Improve qdevice configure process
  - More reasonable naming for variables
  - More function docstrings
  - Move function to more reasonable location
  - Create functions to integrate similar functions inside one
  - Change big function to small one, more easier for unit test
  * Low: corosync: handle the return code of corosync-quorumtool correctly(bsc#1174588)
  * Low: ui_corosync: copy ssh key to qnetd while detect need password(bsc#1174385)
  * Low: ui_corosync: print cluster nodes while getting quorum and qnetd status
  * Low: corosync: Improve qdevice configure process
  * Dev: ui_cluster: replace --qdevice as --qnetd-hostname
  * Dev: ui_cluster: change qdevice related option's help message
  * Dev: bootstrap: support qdevice heuristics
  * Dev: bootstrap: start qdevice/qnetd service when not overwrite configuration
  * Dev: ui_corosync: improve corosync status sub-command
  * Dev: bootstrap: when removing qdevice, remove qdevice database
  * Dev: bootstrap: qdevice certification process when cluster join
  * Dev: ui_cluster: change option info for qdevice/qnetd
  * Dev: bootstrap: qdevice certification process when cluster init
  * Dev: bootstrap: interface for removing qdevice
  * Dev: corosync: check tie-breaker is a valid nodeid
  * Dev: bootstrap: combine Qdevice.valid2 into Qdevice.valid_attr
  * Dev: bootstrap: improve init_qdevice function
  * Dev: bootstrap: write qdevice config section when configuring qdevice in stage
  * dev: bootstrap: adjust corosync configuration for qdevice
  * dev: bootstrap: make qdevice process as a bootstrap stage
  * dev: bootstrap: manage qnetd node
  * dev: bootstrap: valid qdevice parameters</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608379200">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1617796800">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Dev: lock: change lock directory under /run
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="0afa82b21f1709585d377d832519d2d3a2b56050b0f1f4b6ff4b580ceac2de8e" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.3.0+20210507.bf02d791" rel="5.50.1"/>
  <changelog author="XLiang@suse.com" date="1602244800">- Update to version 4.2.0+git.1602225426.5f84efb5:
  * Fix: hb_report: fix sanitize functionality(bsc#1163581)</changelog>
  <changelog author="XLiang@suse.com" date="1604318400">- Update to version 4.2.0+git.1604052559.2a348644:
  * Fix: hb_report: collect corosync.log if it defined in config file(bsc#1148874)
  * Fix: ui_cluster: check service status while start/stop(bsc#1177980)
  * Dev: bootstrap: stop service which is active, not which is available
  * Fix: bootstrap: Stop hawk service when removing node(bsc#1175708)
  * Fix: cibverify: give warning if crm_verify return warning(bsc#1122391)
  * Dev: doc: remove score related in doc for rsc_order configure
  * Fix: parse: convert score to kind for rsc_order configure(bsc#1122391)
  * Fix: bootstrap: remove specific configured address while removing node(bsc#1165644)</changelog>
  <changelog author="XLiang@suse.com" date="1607083200">- Update to version 4.2.0+git.1607075079.a25648d8:
  * Fix: bootstrap: use class JoinLock to manage lock in parallel join(bsc#1175976)
  * Fix: utils: improve disable_service and enable_service function(bsc#1178701)
  * Fix: bootstrap: disable corosync-qdevice if not configured(bsc#1178701)
  * Dev: hb_report: change the default dest data format, more readable
  * Low: bootstrap: should include /etc/sysconfig/nfs into csync2.cfg(bsc#1178373)
  * Low: bootstrap: minor change for _get_sbd_device_interactive function(bsc#1178333)</changelog>
  <changelog author="XLiang@suse.com" date="1608292800">- Use Path.mkdir instead of mkdir command(bsc#1179999); Add patch:
  * 0001-Fix-history-use-Path.mkdir-instead-of-mkdir-command-.patch</changelog>
  <changelog author="XLiang@suse.com" date="1610539200">- Update to version 4.2.0+git.1609987436.0d3a9bf5:
  * Fix: utils: skip if no netmask in the result of ip -o addr show(bsc#1180421)
  * Fix: bootstrap: add /etc/modules-load.d/watchdog.conf into csync.cfg(bsc#1180424)
  * Low: bootstrap: make invoke return specific error(bsc#1177023)
  * Fix: bootstrap: Refactor join_lock.py for more generic using purpose(bsc#1180149)
  * Dev: bootstrap: use ping to test host is reachable before joining
  * Low: bootstrap: check cluster was running on init node</changelog>
  <changelog author="XLiang@suse.com" date="1613995200">- Update to version 4.3.0+20210219.5d1bf034:
  * Fix: hb_report: walk through hb_report process under hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Fix: bootstrap: setup authorized ssh access for hacluster(CVE-2020-35459, bsc#1179999; CVE-2021-3020, bsc#1180571)
  * Dev: analyze: Add analyze sublevel and put preflight_check in it(jsc#ECO-1658)
  * Dev: utils: change default file mod as 644 for str2file function
  * Dev: hb_report: Detect if any ocfs2 partitions exist
  * Dev: lock: give more specific error message when raise ClaimLockError
  * Fix: Replace mktemp() to mkstemp() for security
  * Fix: Remove the duplicate --cov-report html in tox.
  * Fix: fix some lint issues.
  * Fix: Replace utils.msg_info to task.info
  * Fix: Solve a circular import error of utils.py
  * Fix: hb_report: run lsof with specific ocfs2 device(bsc#1180688)
  * Dev: corosync: change the permission of corosync.conf to 644
  * Fix: preflight_check: task: raise error when report_path isn't a directory
  * Fix: bootstrap: Use class Watchdog to simplify watchdog config(bsc#1154927, bsc#1178869)
  * Dev: Polish the sbd feature.
  * Dev: Replace -f with -c and run check when no parameter provide.
  * Fix: Fix the yes option not working
  * Fix: Remove useless import and show help when no input.
  * Dev: Correct SBD device id inconsistenc during ASR
  * Fix: completers: return complete start/stop resource id list correctly(bsc#1180137)
  * Dev: Makefile.am: change makefile to integrate preflight_check
  * Medium: integrate preflight_check into crmsh(jsc#ECO-1658)
  * Fix: bootstrap: make sure sbd device UUID was the same between nodes(bsc#1178454)</changelog>
  <changelog author="XLiang@suse.com" date="1615204800">- Update to version 4.3.0+20210305.9db5c9a8:
  * Fix: bootstrap: Adjust qdevice configure/remove process to avoid race condition due to quorum lost(bsc#1181415)
  * Dev: cibconfig: remove related code about detecting crm_diff support --no-verion
  * Fix: ui_configure: raise error when params not exist(bsc#1180126)
  * Dev: doc: remove doc for crm node status
  * Dev: ui_node: remove status subcommand</changelog>
  <changelog author="XLiang@suse.com" date="1617192000">- Update to version 4.3.0+20210315.5d07d43e:
  * Fix: ui_resource: change return code and error to warning for some unharmful actions(bsc#1180332)
  * Fix: bootstrap: raise warning when configuring diskless SBD with node's count less than 3(bsc#1181907)</changelog>
  <changelog author="XLiang@suse.com" date="1618315200">- Update to version 4.3.0+20210330.06bf9cad:
  * Dev: ui_cluster: enable/disable corosync-qdevice.service
  * Fix: bootstrap: parse space in sbd device correctly(bsc#1183883)
  * Dev: preflight_check: move preflight_check directory into crmsh
  * Fix: bootstrap: get the peer node name correctly (bsc#1183654)
  * Fix: update verion and author (bsc#1183689)
  * Dev: bootstrap: enable configuring qdevice on interactive mode (jsc#ECO-3567)</changelog>
  <changelog author="XLiang@suse.com" date="1620388800">- Update to version 4.3.0+20210507.bf02d791:
  * Fix: bootstrap: add sbd via bootstrap stage on an existing cluster (bsc#1181906)
  * Fix: bootstrap: change StrictHostKeyChecking=no as a constants(bsc#1185437)
  * Dev: bootstrap: disable unnecessary warnings (bsc#1178118)
  * Fix: bootstrap: sync corosync.conf before finished joining(bsc#1183359)
  * Dev: add "crm corosync status qdevice" sub-command
  * Dev: ui_cluster: add qdevice help info</changelog>
</package>
<package pkgid="0061df9e417628cadd8c8e72e497f43a1920212eeb87618e1128337c90d37ee0" name="cross-aarch64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7a3fcf7bb1bf117c21cfe513bb376e8039a2188bbba9574698d4744768e2d24f" name="cross-aarch64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1b6add1004e7967b9b636f3e56854ac187dea18f6f8120efdb904446202f3de0" name="cross-aarch64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3d4009c7289a7650b12698ac964f3694395ab40e968ffed00d901448a77ab48a" name="cross-aarch64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0fd8046fb7c0ad6d85858e6ee4a25a1815ddf18ae74d493041c17c2b2f126b65" name="cross-aarch64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c8e71ae1ad4a3b27b8ce95278c5d2694ba86a1aade3d47004842ef42ed090714" name="cross-aarch64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ff2d4ba47116ef691d72f566de475b221e15270af1aa2b574b8229acecea119b" name="cross-aarch64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b12fba474ec61a71976c7fb264f25a04a55a4a5cee874f8984bab371828bd362" name="cross-arm-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="653676963b65b1e750025a6f78c00b419ab2fa9c9aadbed3f30a8cc2f92c8031" name="cross-arm-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2e8905297c7eb245d8fb9fb6d037fb87423fb46c458fd7edd551f7c11f0cf920" name="cross-arm-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbb27a892deb19aa26c9ed28883e295190d76a0451693cc28d7425ac8de932ed" name="cross-arm-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c6f667d68b9ec2d1d15d61317754e1c44702b2cb122eebeb8da1a806167a76b3" name="cross-arm-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ae55fe91467a0946ddc3faa8365d611ca1f299f0263d115d421008afe4f8a03" name="cross-arm-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1fb9123ee7e504fe7a1b510e321b2cfbb7759c18c8a39adf9544825035c3e8ed" name="cross-arm-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c4b50b11f7ffb18f307c1120405c6c5937cd24e2f372a8ffd30eb059ac05e7d8" name="cross-arm-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4ef5d8640b5e38667985ead3350de59cb2609f5480f770fadd886be02c825dbc" name="cross-arm-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="54cb7b5e9a441ce0d81b151796897d31b8aa359191c3499fb3556b19469de4d1" name="cross-hppa-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0fb1065436d3f5edfacf620c39201f9d27f694c12f356cc3293aedfd8a35979e" name="cross-hppa-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6d0fd957bb53348a69c4a9fb36abd27d4b5c5489b1315fe061a60f8f1cc5a6f6" name="cross-hppa-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2de18b8fcfab80d3627cce5f0703e4d0dd7b2ee230d7e5db7a115e72ea11affa" name="cross-hppa-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="91b44e60bdf8aca2b002ae8c14822505377ca38253ed4e6092390ec287695e22" name="cross-hppa-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5602da269a1a24a533330dca26eaa33b98b09bf20d5a0ad813955b4df6d46180" name="cross-hppa-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="841843f993fa228f68135a4d4a33822e6038f2fd5db296b5f0a871eddd4d1814" name="cross-hppa-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="22b1036138560eb6765bcc31f25cba453a9657441aa6d829675013fe10c33d70" name="cross-hppa-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ffbef0a4d0198d2a11b498a823de2fab8fa8735208fa4b590d60a63b4060dd5c" name="cross-hppa-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e3f06da2f50128d5752d3b4714726519655028b314a50116e54ca0a95658ddef" name="cross-i386-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6af794eae0db28f7cbcd09374f2f309d269fcc3d3c37cc2ee17705cb83b40626" name="cross-i386-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="780f944f258b8fab0e0d6e5d43bb3e43a2e429bcaf9597c7306b7d6f6147f998" name="cross-i386-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ed29c512d8afb7cab1bbd08f2e74ede6c0a27357e4561794882f937d1c648385" name="cross-i386-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="43dac4b85ea4057a894cee03bce82a95ca8e02f89f096cf91a1e43764d50a863" name="cross-i386-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2d9fb4d50839247c9b0846b9f3a3a25af8dab8ef629c4f520289c2d2ea5a7b01" name="cross-i386-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3cec72fa9651142df07c8c82c5366848c2db4ecddc4dbc72b20478289b5d63a2" name="cross-i386-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c5f231e3663b3fb019df44082afad9080bfd9a4a1c3ca0df36b2461ef8816f85" name="cross-i386-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b15acd1e82eec851b765c443e5eaa8be2ab299152d55c788445922d1fc74eef6" name="cross-i386-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ad004128ed106920b2d26124c0ef6c748276e849091df470f3ad4cb89e97f15f" name="cross-m68k-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="30198cfdd7384ed0ad3f72eb3c790edcdabfa1b97403c55748ce16f2e664a35e" name="cross-m68k-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbb03ed05786272164ff0349f7f756c8d936e6be2b81e77b52c6902c7cb6a934" name="cross-m68k-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="60bb650b9c0bdf5f35d7b7b2d0067f9cc1a7d166ca5f05e5397096750310c3ca" name="cross-m68k-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="640a7b20d2d66e70a24a5d7cadcc978b4be1035e8081c5d2f184f8ce6d763191" name="cross-m68k-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4fcb6756de035a78ebd90cdbd5f6adc4afdf0ad2705ad543b912356aff18f246" name="cross-m68k-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bbaf86f55f1b4527771fe86b01b4133cf79eca1f69ebacb1d21ce5aed8e458af" name="cross-m68k-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02f30945f0901fc3c836c90d9e572eed03475d3a9254d4553bafe2de3adf1c65" name="cross-m68k-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="255236f20e8e670945fb262a5d9753b0dd1b7441946c17dcf119c3e96fb333bc" name="cross-m68k-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f91ebfc39d04887e0723b298fe091994ca5d39d8d8cfae476c2a24be1f11cb3c" name="cross-mips-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="53e6e22747ab803871823e53242c4dbf0d1031866325308d0c49a8f38e57f53e" name="cross-mips-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4870dcb90bde93730f2c2b6dcad27d0effefcfc6c938599518409e2dc6b4f803" name="cross-mips-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a9732fa9d959c278a83152562e25d1a2028f5e57c1b3fd5724df9446dd0d8cfe" name="cross-mips-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="dce3700f83fa210774e243d0e859af70ee8dcd801b7f65e64eb0fbe4e11ea4aa" name="cross-mips-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d3f8abc017b2ed826f8699bf9520fde07cc6aeaf02cc3af3f69f4aa063fa56c4" name="cross-mips-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="870f7f777369b3e6fdd7101ee567ea2acb349869831fd94d127ae3cb30c78319" name="cross-mips-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af9f1814f427cba065119bc9c90d839c3464ee87c504f28e92dee3dfafb825df" name="cross-mips-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="32d65db73565648ec01c836ada95f683d0959a489d10d3ce85b5b40b270a649b" name="cross-mips-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8ac10ff63ce2894f62d0c88e5c2196355b7a41d0ff37b9834a29e9186d63e464" name="cross-nvptx-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="79ee4b241b45b4c33f9621b0c652841f92aad0698659cf6d0fe14656c7f4ac63" name="cross-nvptx-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a2f7ccb4f2699065c434ed6a2bf597fc56062d6ee0c558bb0d964ec999d45762" name="cross-nvptx-newlib10-devel" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f08f15ceaf3c22defd9588f38ea837c1728e8906e4ab311569f25a43ed7e37da" name="cross-ppc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f4505eecd244450e01784751315914e83c594b41318ffa4895555e2011eb94bd" name="cross-ppc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="538ec0c617fdd119be3d46fff2eda0ebc8d37bd7cc4fb4eab19950922afc0ada" name="cross-ppc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1609d593328ce3b62dc6f3d9df801a9c6f97c86f4686892834d9009fb96d22db" name="cross-ppc64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9bc3cf4f1166d9b6bf8a2cd0e8febc3c0b069442f85bd3ffadf87531b05181fb" name="cross-ppc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d1ec90385ae3209b9414bc30a328568990cf02734939b3b6def8f803b38f599c" name="cross-ppc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e356cdd9ba1c05e582867e69ec3fbb6dd406f0e66bf47040c9ac002a43b4c96b" name="cross-ppc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d7703a63b2a14bfbecb7a1b446515739e51de900b632690dd4a37619b7ecf4d1" name="cross-ppc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f5975474d75e4b9c4000e62465ec4083a598bd03f7f7dc176cbfd6fda54a6b56" name="cross-ppc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="dced17cba01f76a3f0f7784747c835c472b646301d932073e5a1e13bd6202f3c" name="cross-ppc64le-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="731e7f3bce825dbb4e3655d4056db7b8c81d80efdc2e9b0d02901963caeae114" name="cross-ppc64le-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f55b7d33aafc096c223ee9bf40662cbbe4b79ee16a9d2837c27d8d182f4841eb" name="cross-ppc64le-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="63bddbb087ac496806495f198d9bf95bc401dd81f86bac27a68c8242a1b79142" name="cross-ppc64le-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="044fe07105f6be1ca3a74b5972244c564e943b76905256dea851a5724308659f" name="cross-ppc64le-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e602e24cfe2bd6e8b79a57aaf8cae797ea83f8ca826e779fd9579e2afc34046c" name="cross-ppc64le-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="beeeb9439d9d9e093a3ba3d83a8671ad754d36d497802a6161ddb27b76b1539c" name="cross-ppc64le-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c8b4a68d14d859274a9668092045afbab81a95c0dacf177662e14386de05f7f1" name="cross-riscv64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c67c4d0e858f156cce27e145b89849dc867456fc57cafe6a49308ed41fa0533d" name="cross-riscv64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="786055097776f16821d9bcf91a3c468b8c2261c499f8b811688ca1c9155e4d36" name="cross-riscv64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="01bacd5e3c61f7ca9bbcf684d7daedf7371d1ac55cc2d5aa21b4ef98b78d194e" name="cross-riscv64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="54b0314098840b23bf3941326d7132b4f3c3d9b484a8cc849f683c29fa4a5c4c" name="cross-riscv64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="eb03f4e7b94f7ffc10e6cbb1e8ba25edeeed6ea2da1a563d9ee3f37d7a232dc5" name="cross-riscv64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2dbb382a8e605aced1bb1f2692e7e02ebd384c12007fe5e4387d7f76489b3860" name="cross-riscv64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="35a681781680fd319442808474cfc0565d401912175db0ea0f0f638ef84c0b95" name="cross-riscv64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9cd3ce081548b0c840a0fb284aeee000fecbd8cb51d3ea1bec0864f112214956" name="cross-riscv64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7807e68344f37d499e1ed8f8eff4bcf80f8a90b60155f02e0692a7f3b101110b" name="cross-s390x-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e3f99a910db101a0774e24bb2aa643f7f013f22f152693cc94721ac931173330" name="cross-s390x-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b24053bf75403536726e8e9b707b48d86a220ec849a59c4d619b8a491d235323" name="cross-s390x-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e7163c0fdce18dd2c22b1eb832dcbfad23d1d48bbf0e92cb2a743d23385f99fe" name="cross-s390x-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4eb36e5561f99c26d3a4d010423a6a90bdfb36518df3b54646b502b6b00c10e0" name="cross-s390x-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bd8052f93b016f9e314b79d2572c23a9b66808661c983af68b1216c1b5db8fef" name="cross-s390x-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="084f7f06235803835db2e2c25e0750d6f573b219504d7e72b62178792e9f4d94" name="cross-s390x-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="402fca587ce81ae6baf95ea2ff8a226f494d24d4499e80897605ac322200f068" name="cross-sparc-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="aad8e0cd281ac97021e5155482124278b9b62db3dde9fbf5b7bd352f1a060eb7" name="cross-sparc-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d76d2d5adb8d08fb70889560c45bf6290f815fc0b1e641bea32ef3ba5550b8bb" name="cross-sparc-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="82303d50020931d241cb8a699fc81bbd3ebfce7cdf11c8fdbad8ef13eae83af6" name="cross-sparc-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7e2f7c43b9bdff5980733bb6d0803362da30d890780c69c5aa05d1afe0bfb846" name="cross-sparc-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="27ce1cf952a1d768d71f05c31c981584325be17988c9d6f1cfe035c5d9cd373b" name="cross-sparc64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="770ad1a84303a6a50dc5ec90fece9f0a2d91096c018bffc0c6abd45d3e247560" name="cross-sparc64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="eaccf33ae2a3ef5ad0f7f27d116ab3fafbd7457b16fdced34883143438caaefb" name="cross-sparc64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="da47a8ad715c984328337de74e25bfeb0a0a4f12f6999dcda4c5f326aa4f9878" name="cross-sparc64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a5a0dc80ac1de0290e5c049f15bec9cf05f5af8cf324eb80d4b218e32d9d1ad3" name="cross-sparc64-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="61424501639a34f94d68f94075a793d3142b97c6ca29eb8e6dcb490245584f23" name="cross-sparc64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7b37d51308b6b96014c9d3e8221b0ff144cb3c8ade1aeb27db2d50416c9e3be5" name="cross-sparc64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="93521560b361efa9cbc97da58bb1aa2abc67ec39046f4564e3f5a0d8bdfc0976" name="cross-sparc64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a814ed776e380ea629d7febcfb206ca9808c154b01b26e6f4f3812f83aa9cf17" name="cross-sparc64-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f955f9ef82ef15660c9666160bb0da4899a032c103bbaf68c8ab8a59e7c2ea26" name="cross-sparcv9-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0ecc60b761d3795e19f3dbd0051916a2711f9e95cd5f3c773bc202c5356f8280" name="cross-sparcv9-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="531cf4b32b7ac131110ff85e541afd0c1a5cd41e5f7d65d4add02c184a686dda" name="cross-sparcv9-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="38437a0bfb3b603bd0654ff0e1a686c2dc458772616c725830d379b93fe78fa7" name="cross-sparcv9-gcc10-icecream-backend" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="481546e40d5b757a675a28bcf0bcc51bb0f889cd1194527d0eda25d403e1e8ac" name="cross-x86_64-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6757a1c6f06c20e69046cc5da9e88a82a71c0aeba78495f50fda985ec09faf00" name="cross-x86_64-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="88196cd53206a34361575b705bea762dd2711964334af1eaaea84f2ad58a89b7" name="cross-x86_64-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="277bb75a162299a6ae763b38993ca9f7deafff13050a7c05da298082f6df191b" name="cross-x86_64-gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b574b456bedbe2dcfbc6de1892d3e923fcd9724d93231d0972ab0bbca6fb59ae" name="cross-x86_64-gcc10-icecream-backend" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02d325822a04559b00034243d8d7f539c986a3aca217d1a461f2b0aa709705ef" name="cross-x86_64-gcc10-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f350f4f178a300e1762d2c1cf56fa50e54c67ee8f6fbfe7dbea680d487c84940" name="cross-x86_64-gcc10-icecream-backend" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.3"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="df774ab7ef589275e3c0873df719efe964bbc33036124d55ff9683b7cd35ace6" name="csync2" arch="aarch64">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="6609974619c1481a3033df65aee576cb8a6b3bf3780510f19eee7e40aa560705" name="csync2" arch="i586">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="c4f6a40e71671020f55f5ab106761400ade3faa5c4f88fe3b2f9c005f4dfb39c" name="csync2" arch="ppc64le">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="d17341077aeb4beaf2cf210349a4c965a34755dfba5faafefdcb1855c968be93" name="csync2" arch="s390x">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="b5af186fbc869289bb3185bad5de9bd9de089e977a9362b146271ebb3713f888" name="csync2" arch="src">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="f2742953d3cacf6db896cc2869a651da7c726d8f959e28070d84dd43ac5c2e93" name="csync2" arch="x86_64">
  <version epoch="0" ver="2.0+git.1461714863.10636a4" rel="4.6.1"/>
  <changelog author="tserong@suse.com" date="1368187200">- Try to bind to "local" IP explicitly to avoid "identification failed"
  errors with multiple IPs on same subnet (bnc#757327)
  + Added bind-to-local-hostname.patch</changelog>
  <changelog author="tserong@suse.com" date="1378900800">- Update to upstream version 2.0-rc2.  Changes since 1.34 too numerous
  to list, but include:
  + Database abstraction layer (default build uses sqlite3)
  + IPv6 support
  + Native GnuTLS support
  + tempdir and lock-timeout config options
  + do-local-only config option for actions
- Reworked patches and extra source being carried in openSUSE:
  + Added csync2.socket and csync2@.service for use via systemd
  + Added add-ac_prog_cpp.patch
  + Added fix-csync2_ssl_cert-filename.patch
  + Added fix-sonames.patch
  + Updated csync2-fix-xinetd.patch
  + Updated README.quickstart
  + Removed fix-missing-sentinels.diff (upstream)
  + Removed csync2-1.34-pure-gnutls-r2.patch (obsolete)
  + Removed force-debug-stderr-off-inetd.patch (obsolete)
  + Removed bind-to-local-hostname.patch (obsolete)</changelog>
  <changelog author="tserong@suse.com" date="1380196800">- Ensure COPYING file is included in package
  + Added add-COPYING.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1427371200">- Add csync2-librsync-1.0.0.patch: Fix build with librsync 1.0.0.</changelog>
  <changelog author="kgronlund@suse.com" date="1461758400">- Update to csync2-2.0-6-g10636a4:
  - Document the -N flag to bind csync2 to a specific ip address.
  - fix diff mode truncation to first 512 byte
  - fix diff mode prefix substitution
- Drop merged patches:
  - Remove csync2-librsync-1.0.0.patch
  - Remove fix-csync2_ssl_cert-filename.patch</changelog>
  <changelog author="jengelh@inai.de" date="1462536000">- Avoid runtime dependency on systemd, the macros can all deal with
  its absence.
- Ensure csync@.service template instances are disabled on package
  removal.</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- Requires(post) hostname|openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1500465600">- Remove systemd dep in favor of systemd-rpm-macros
- Format a bit with spec-cleaner
- Add proper dependency over openssl
- Remove all the tex deps as we now reduce from 300 to 160 buildrequires
- Remove xinetd service and use only socket activation to keep
  only one tool for the job
  * Also remove patch csync2-fix-xinetd.patch</changelog>
  <changelog author="varkoly@suse.com" date="1574251200">- VUL-1: csync2: bad TLS key generation on installation (bsc#1145032)
  Adapt suggested changes in %post section.
  Do not hide output on standard error during generating the keys.</changelog>
  <changelog author="varkoly@suse.com" date="1617796800">- VUL-1: CVE-2019-15522: csync2: daemon fails to enforce TLS
  (bsc#1147137)
- VUL-1: CVE-2019-15523: csync2: incorrect TLS handshake error handling
  (bsc#1147139)
  Apply upstream patch:
  0001-fail-HELLO-command-when-SSL-is-required.patch
  0002-repeat-gnutls_handshake-call-in-case-of-warnings.patch</changelog>
</package>
<package pkgid="79c0d2233ed7c5e6a9645a7eca2d78004a6b2e548fb1ddbf61b7f6691f6af0a7" name="curl" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f386de9e4b6464847ea1cb1cd8c1636a63a3da1cdf9816d1d6f55c141ea1e80e" name="curl" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="0beeee3495874268c1eb4533e096de8390e5fa3dfb2d9ae710798f0e73941307" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="8b39fca1eab89b23fae0d73a930d5bd7bda36d8eb2e7b1521df06419fbe97067" name="curl" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="168e9d173161b6389803929bd8b5ffbb024cac21d5ce6fc44f445c1d0709320a" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="db2a097478b2d79297493fa12ff7e2f60709e5ab080362b45e6adeaaa4a92543" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ba738422bd430f3c09af451a472d63c9eeccddca4166ba34451aab92eb43e65e" name="curl" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="fee121970bb8a4236579a82a4015f0be0ea0f34921e608683104673cb064b0dd" name="curl" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="48eb01183876062d1fa5e7231a7039a05d811ac9eeb16e1292b79d95d0087cab" name="curl" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e44f0e34e27b6a4719270f13f5530c5ba9407286305b196df96650d2e605d10f" name="curl" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f4e648247ffdca268c936612165cccff050f5f9d3b7426b955447aa76153863b" name="curl" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="843e1e8ff93f685250a1af87462584e6afbf66419cd11234faa858f63849dd88" name="curl" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="877048aa9cf3845240a67d1791b4ae5fb680ec357a411bcd2e28b90a4d9c49fd" name="curl-mini" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="0765a7ff9f0caf389396d4dab9473d29e3823a3741d6f50d0359276bda432a87" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="24c3b7e02c4053b1d8176e086c0ccd48d548a8b7de22ff729dee2d3367401c22" name="curl-mini" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="11ba3a616998c24ac732054304d3b0c7b55c05cedf41c558aaeeecffe656e2ef" name="curl-mini" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="d1f9472d84dcc05f0e4e4ebf2ea7602101e05d88ab0707c1a7e3684ca94eba89" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="279e8a85782364fc536c6839707462396e02fcefba716f328cae33de9a2815f9" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5a689bdcdeba1e1e6b3c92da7f715aa4457cc6f6545bfacc1985460c3dbdebf8" name="curl-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5956b4603cfcc0753f77db1a8a953011c02a720f3677d1162b9167b7c1d1f95a" name="curl-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ab56994d1e97b136de66b780a9af4c45a4ec9a48ab18637e0477fb9d535aac7d" name="curl-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7751003ed068c738777ccb85703899e8b226afc0986d73b38e1808ed14147257" name="curl-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e9afba60ea3e0696171c7a633977cdee39b5cb65fcfd7c9b1c2dfc5000f301a9" name="curl-mini" arch="src">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f83abdf0c11d4a29894f21013f7eb9169a8ef3bc4f69161f3a7a325ce7a1fcc1" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="970ef3bea8739f2eb2f24cfaad36a1ffadbd37df05d25c08ddd3f99bfc3cd0bd" name="ddclient" arch="noarch">
  <version epoch="0" ver="3.8.3" rel="3.7.1"/>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="josef.moellers@suse.com" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="999baf2d5f1034fd41f04d363397def4623830fa3c4d3a7091a0ca398a4cbf76" name="ddclient" arch="src">
  <version epoch="0" ver="3.8.3" rel="3.7.1"/>
  <changelog author="chris@computersalat.de" date="1400760000">- update systemd stuff
  * add {?has_systemd} to fix build for Systems using init scripts
- spec cleanup
  * add missing BuildRoot</changelog>
  <changelog author="stefan.fent@suse.com" date="1403092800">- fix pidfile path in /etc/ddclient.conf and set ownership to ddclient
- create user and group ddclient (bnc#881520)
- create /run/ddclient/ with user and group ddclient if not yet
  available in %pre</changelog>
  <changelog author="pth@suse.de" date="1404129600">- Use perl_requires instead of harcoding a value.</changelog>
  <changelog author="chris@computersalat.de" date="1452254400">- fix for boo#903588
- revert patch change
- recover deleted changes (rev34)
- systemd fix
  * conf file must be accessible only by its owner</changelog>
  <changelog author="josef.moellers@suse.com" date="1486123200">- Upgrade to ddclient-3.8.3.
  * added Alpine Linux init scritp - patch send by @Tal on github.
  * adding support for nsupdate - patch send by @droe on github
  * allow log username-password combinations - patch send by @dirdi on github
  * adding support for cloudflare - patch send by @roberthawdon on github
  * adding support for duckdns - patch send by @gkranis</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run in ddclient-tmpfiles.conf
  [ddclient-tmpfiles.conf, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619092800">- In the (sample) /etc/ddclient.conf, also replace /var/run with /run.
  [ddclient-replace-varrun-with-run.patch, bsc#1185069]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620820800">- Use %{_tmpfilesdir} instead of abusing %{_libexecdir}.
  Use an extended regular expression in sed to change (/var)?/run.</changelog>
  <changelog author="josef.moellers@suse.com" date="1621339200">- Systemd expects the PID file to exist as soon as the main process
  exists. However, it takes quite a while until the pid file is
  created by the daemon process, so we delay the main process
  for 1 second before exit()ing.
  This gets rid of an annoying warning message in "systemctl
  status".
  [ddclient, ddclient-delay-main-process-for-systemd.patch]</changelog>
</package>
<package pkgid="6467bd668e113d79986313bacf183cd0b705d9b67aa77c0b751d6cb1ac040a6d" name="dhcp" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a6dc3e1b5503b798b15dc0769082aa7b5f9316f3b3a6fd6222be2accba33daa7" name="dhcp" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="05b1dfe7abbe9192ab96aaf54383ae5e523ac9ab236773310965e1c6d656f8e1" name="dhcp" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="6e0c3c674959c8a3a9813ba13083ae253190f52387598d8caa5fe7b63ea0cf06" name="dhcp" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="9e9f4d84477081bcbabb23534611a60ec8a4332f3592826e0661965e69bddc64" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="49d66ca18e67a98f0be6745806d50a13509e54adb5e5cd8adb4fab2910945b6d" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="af14deea1ea15f209a58f9c2f1671e5fcca704958503317d22897a25945f604a" name="dhcp-client" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f6be00826a736f6542cabbfce5147ad4c86d283e895f7a60fe378c82f911a81e" name="dhcp-client" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f0bb2789f162412b2a64ec308adc498adf664cdd53e48e82bbfb43902234d4d9" name="dhcp-client" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="8ed33487ff4f7ec5ccfd63bdd658e81eac730381b0fcc4c8b102a6faed159459" name="dhcp-client" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="6817af8bbda2c44e6a33cdb46e5277d7d783d339d79620d834dc7c8f12d3885f" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="808dff9a6968e20234f19ef86a7c06d90b790da942af355dad7b225b6c5c4398" name="dhcp-devel" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f0dee38eed95c7903e17ac558313bfba655d70fb6e4dfbabe24b978dcc49433c" name="dhcp-devel" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a61b0c62f67d56cf6ffe86a450c136604467077932bab0e24bf5bdd762ef0c7d" name="dhcp-devel" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="09d974fc4ee5afa15d5cfcb1ba59e8df008e71a929df5f974e3a0665bd66bb50" name="dhcp-devel" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="4b7ca4a2030399cc07919749baf9e82e9f5c5f522609ed436e517ddd9cae9f5c" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="3d9bb03c5169ca7134a8838e6a3996c84a9664f36adc3a303e55f3de0e572de8" name="dhcp-doc" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="7dbec8aab84580e378bd5c0aea73390ec0a70d419e8ebafcc2679607cc0386ad" name="dhcp-doc" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="7d5d8b9de9ae2dc524ac8c92e7c87181e8e199ef24cc7fcc88ad6fb97afc8684" name="dhcp-doc" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="4833f4c1324c15c2924add1aa10b813a55fd0fefea7f8363f1899a8a1176cbcf" name="dhcp-doc" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="3e86df96e61767fd62ccc8604c47409cb3d7d46be0cb795398ec072ef596f7a2" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="ddecdfe3a04ed038941a02983de915e8eed839e6f6e7d9a391250ed8ec48b9e4" name="dhcp-relay" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a23c20acf919e7b0c18b0f8ca3b18d899106f624e3638d7020c7fcefcc2028b2" name="dhcp-relay" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="063c026d67194e731718bdb1a10dad7426e5831e71e9e30bf582473f9e54a4e7" name="dhcp-relay" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="d39ade0565389fd5e28517c91403c3e5e9c6b6d5ea9e2d781c188abb7e17a4ee" name="dhcp-relay" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="5526260ef1f5ba352fa3403cc99a467a1cbeddb8c009ffee2a73a8d574c2c540" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="f483447dbb41edcbe5ba0a7b684ddf39f56079147d7f0d88701ee5aacf620fae" name="dhcp-server" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="1fa0f131f60fbaefed20e35a5b298e9e22ad9ca58a002af64eb2f9b2ebf3a0da" name="dhcp-server" arch="i586">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="0ef23b4cb08147743749c889f6a8b38f8a4c081749c8025a3323762221c94216" name="dhcp-server" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="dffdee5af24bbba4d790bb785e746fb87ff0b418cf6424552dff39fec14c3f26" name="dhcp-server" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="a8b8d5efa523188bcefc3efea964e8bb4aac64dc6cfeedaa39499a37724996ce" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="6.11.1"/>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
</package>
<package pkgid="e882616e9c71030734d5298b0436cb9b95e738b0c6532441b50a35079180cf0b" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="833b3a9a30ea79203a450745fd0316a389dd4a448297805b6cf55df1ef1b0780" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="2863f1f8f70afaaa2d2dc2bb32c4448b10bf633a02e7b55d2db8219d8e3cde07" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="6b7fc49e0894237faf0a131d5aa94e74c8a1de72dd879a16959ee871ad6a68a5" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="c34f3d5011000b9f7f669a3461798419ec4f8805a15d3e704cd305f8e941c383" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc0e673d7575e1d682fce9b2ed3790fe83f839bb9e8c39345a1d3a1417aab596" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="d860ba612ea1548371a696f16ba229f4c35ca457507a1649d38d68b678aad46a" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d8a58045995c93633eabf076ca90a6b7b756d8008cb9543ce70d9a658d96a965" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="c23eea4c774857fd5f43c6a2a73c63867d080e290db549a0dcb5df3ffe5086d5" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="c95157aa1468304d122b8f0b1739e2a7a79abd1be9a6c7368459b65cb770869a" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="5d1cd2678c05b28d5896c3653bcf0571bd8fb2889bb99fc4226c8e7e7e6b7a0f" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="3b17a510ccd548e072f4c109aaa1a4d9f0ef4bc3a7cddccde5a014d0cc6ee876" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="ee964140dae9332a58836646da295aa751c6acc846549f55ef9b687260aed836" name="djvulibre" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="3e550b48aaef9b7cc1799244aa6363314a999d3e7fb6359a79846e991c968243" name="djvulibre" arch="i586">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="979a105b233045e3f2d9ea85dcfd5d74520260e03f689fb7dcc8f44a119e63b9" name="djvulibre" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="01eddc3264bbaa8d45531a035033c7b56f02c816b49a7ac941b45191e60f8d30" name="djvulibre" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="2d1f6e97ab5c1d5a3579b08b954db22a73208831a97e4b74ca0b5c4a0e66502c" name="djvulibre" arch="src">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="2fec396a7c79baa44be473400ad0856eaefbebc796345255b2aa16ac7380f296" name="djvulibre" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="51eaa038ee42c6eeab7bdb84ccf249b32c67b70c8e490e052b63b251b264833d" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="c7d67765028d84ad5dd58f410e7b0e69c68905e37035c6a133e7d0cf15a032f3" name="djvulibre-doc" arch="noarch">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="4caf66480e78defe033e01688830668db7af5f78439ccc85ecc76a4844dc3997" name="djvulibre-doc" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="b64ed48bae55b18399306598959beebfffd1f726615b8aac1fe4c04d2c9c031b" name="djvulibre-doc" arch="i586">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="761cbda69b96167e069d45785a23492f799c7719348d9f130a2f66ef6a685bb3" name="djvulibre-doc" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="a684018a4229539ab1354833bf9f83ae534dfba0798a66badeab3e5a5f6e4a89" name="djvulibre-doc" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="1ab5be5e4be37557071acf488e8fbe2dfece26d71ca1a0eb0a89beba107092fb" name="djvulibre-doc" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="b8877169ac18034eaebb329bd610669904840b76b30f119351c059e4e4c4938d" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="dddea8620a72550c52e1a3b339d708b2394252de0a9a157ac076638266ea76f5" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9ca644d75337f55df161edbe499c53d9e6645c2dc98e1c6a2de163a5530fc13c" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3a7b5bfe0391254d20fd9a78ed74dce8b0a473077d058bcc6714d15b9e1cd9ea" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c380fbc023b8047f082773eff4d6c909a8206f4de1b949009a344d0391d68c62" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="fb7f25dfd6f817735d8d8e62a528e77d0d693d411fa756edf4264c705457ef49" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="10c178f4bf561248c7f11114144e6a672a7046398effb1a41fcae9d38c8168cc" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="747286a88c6633b74ba48f2df15ca59017eb95b7e9d4ba2afb11b64779c1bf19" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="fb8358fb8d5f886f28b1533f03cf8851e00b9687241c9cced0c61d11bc07002b" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="f711b672143d6909c4b4190ce1b873d7889b892dfbf79ffa37a71fc9afd42df3" name="dlm-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="b359831d568822911782e1a6e8f692c48d1e65864b8c92e1c8d23c9d52f693b8" name="dlm-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="08ca0f5200ec726390f97d5119b5abe955a75486d53f912f7a22fd404b7d8058" name="dlm-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="3ebbcac4b04c99a7ced19b0ac2dfba4a151cfe2dc5d2553e33351aa85cb7c77c" name="dlm-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9fb5c689b68b2ebc9dfd4986a2ff17eba46006631659e297f0afe086226a5bb6" name="dlm-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9562e8b0e7fcb5a823c61c1536e2ba62054d4bb9da789716852be2ff699802bf" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="96ac2d49b019d99035263f6327091188e6302507b0962abfacb058fd14000b91" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="05661f171a8b91d10b38f5f583c0b0cb4cb64ec113f1973b398f7cb30a03e0e7" name="dlm-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="d15a5a7e04ccd821f12f1a6854b712818ec2e831bb65b87a9e8f8c7276cb6c4a" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="7baafb665f51c082d631e922022db7eec8da6b3241a1a2606c1be4df26a55d77" name="dlm-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="e96d648332988d3887a957cd127e9265bb8230a911bfd15856e955610038a08e" name="docker" arch="aarch64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="bd48a3a48e1b8cd25953fc2c6f010656eda6c6d4de3f4b7cbd8583591292275e" name="docker" arch="i586">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="3c9db42c97a19ebd7814ff5a56eb6daf0cd34b295f8d2c54fdafb485784c7b95" name="docker" arch="ppc64le">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="6a81330b3075e6499952c5ee34fa1c012785a7e31bd9cc966d06396ca316ffc7" name="docker" arch="s390x">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="57f8c9d195de08cc889d93003a2613bb0c50f40a7586735314fcdaae96cbe1c0" name="docker" arch="src">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="5381a7c9853b06c2f546ebb3edb96711cd9a98012b81d20e48f8035ef37c55f0" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="a3890d2a6786d779290a45dec2c030ccd223f5a07ba83b823c2986020fe1db12" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="755f9e9fc61cb54a78bb4e5fc52d9e9b22cde3bc77431d0d23dd806304b7e0f0" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="27f23b60869e17f9b64e58e81daf00a6f021f22612969cda988627148e930d4f" name="docker-kubic" arch="aarch64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="81547a788115f25ed32553a693ea1a09cabe3bdcb97106ded02e37c6835a492f" name="docker-kubic" arch="ppc64le">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="67b8551a953e9ea42c3374deb114675f5de03ee89531551ab48f646faa4f1647" name="docker-kubic" arch="s390x">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="48bad2ce53868e04e2ff74817d1788dd46e37582f4d48ed37703c20a074485bd" name="docker-kubic" arch="src">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="1b58e33dfad40dcf215a8335bc1ba5bed390548e2e502f089523ebfec85c7750" name="docker-kubic" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="728564973fe87ba0b4285d042fc628dec0373db27186bbefa67302fde105debc" name="docker-kubic-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="8d5506ee258be497f3c256fb8fb6e72e5e46180976e3f68c6a497f89ef618fc6" name="docker-kubic-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="03544a6a743a39114b5c6798a9c8e0a4e02a2a88002c5b5285af4489ba389007" name="docker-kubic-kubeadm-criconfig" arch="aarch64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="0fd77d5cfbe4470c1c361ae4a752383b0b030c1826546e01cbed1d5e16317658" name="docker-kubic-kubeadm-criconfig" arch="ppc64le">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="3ea37fea2992bf15461c33734a777f7b07bf4d6eea327074cbd8fea11b74ffa2" name="docker-kubic-kubeadm-criconfig" arch="s390x">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="78264166f376cc978369ebae2782ec67e605a6ada874fe27f276bc9b64ca7209" name="docker-kubic-kubeadm-criconfig" arch="x86_64">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="b33cadd2a47a2b048e6dc7208ea52390c9b66e8375931ee5b77a7e1ec466225e" name="docker-kubic-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="ba27dce51e452b2eb9248f9484d9aec2dc3d846bb01ea314e5840e29f7339a95" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.6_ce" rel="6.49.3"/>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="8f749e651ca5358eac09dd390357cba69a093d9bbcad18da66804edb426bde6c" name="doxygen" arch="aarch64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="9ea9fe31c7e637fed52c420b7efa9a9a006428a94f614342270dcf4fc3dd4bdf" name="doxygen" arch="i586">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="23d4e2be9d4a492969b789dd09d6802d74baa72739724a7fed8d1e889fa843e3" name="doxygen" arch="ppc64le">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="d5b85b57d662c03d5fe763cddc83c4d717b8114c37a5e8b0cf69fe108bcc7a1b" name="doxygen" arch="s390x">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="7bc52392652afa208ab07f72f53cbae3616f177f001c5c203654d016645c57cc" name="doxygen" arch="src">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="6d0721ee0fda2ae183658fa53459bd1cf0e475c9ecdb5939218bd251d49ca016" name="doxygen" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1461240000">- same work around ppc64 as already done for ppc64le [boo#921577]</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html
- update patch doxygen-dot-one-thread.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1480507200">- Fix: Add missing jquery.js, dynsections.js &amp; optional
  svgpan.js to QCH file [bsc#1011331]
  + doxygen-fix-QCH-files.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1485259200">- Added res2cc_sort_resources.diff, sort template files in
  generated resources.cpp for reproducible build, fixes bgo#777672</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13
- dropped doxygen-fix-QCH-files.patch, it is part of the release</changelog>
  <changelog author="dimstar@opensuse.org" date="1487592000">- Add doxygen-guard-null-variable.patch: Protected against NULL
  pointer of variable al, upstream commit 0f02761.</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- remove CFLAGS CXXFLAGS overrides to block PIE enablement.</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Remove upstream merged doxygen-guard-null-variable.patch
- Refresh patch vhdlparser-no-return.patch
- Kill doxygen-doc subpackages the latex deps keep growing while
  it is really easy to download the generated pdfs from upstream</changelog>
</package>
<package pkgid="2d69bbd789e169066b40d0db19296e1a1460715ba9666d029fa3d14fbdf265c1" name="doxywizard" arch="aarch64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="2ff6b5575f6d6d4f6102d4061fff981bcf9f74fb8a55f5f8b5c4316506e53824" name="doxywizard" arch="i586">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="0a8a0c97abc18d26d4bce92fefc7c33571a682e6f98e3601131de18bcff58114" name="doxywizard" arch="ppc64le">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="a1eb3ff593d46aa5160228e8ea85e8225ceea7fb92bd87792960da4a1e939211" name="doxywizard" arch="s390x">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="eaff4bb4a14d8b659c012901b2bbba6c8ee9969729478c9b2fd92e3d8ef3b512" name="doxywizard" arch="src">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="76af6032606f042312836f2e325c374b92024f7c1cad2552cada92c2bc32453c" name="doxywizard" arch="x86_64">
  <version epoch="0" ver="1.8.14" rel="3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1451995200">- fix build after update</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456056000">- Build against QT5 in newer products
- Do not link with -pie as we are not compiling with -fPIE</changelog>
  <changelog author="foss@grueninger.de" date="1473163200">- Update to 1.8.12
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html</changelog>
  <changelog author="foss@grueninger.de" date="1487073600">- Update to 1.8.13
  See changelog at http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_13</changelog>
  <changelog author="foss@grueninger.de" date="1487764800">- Revert erroneous change of required CMake version</changelog>
  <changelog author="mpluskal@suse.com" date="1510056000">- Explicitly require python2 for building
- Use more cmake macros
- Run spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1510315200">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Update to 1.8.14:
  * Many fixes during the one year development cycle:
    http://www.stack.nl/~dimitri/doxygen/manual/changelog.html#log_1_8_14
- Switch to python3 instead of python2
- Refresh patch vhdlparser-no-return.patch
- Use qt5 doxywizard even on leaps</changelog>
  <changelog author="dimstar@opensuse.org" date="1515153600">- Export LANG=C.UTF-8 before running the test suite. Python3 is
  kinda strict and generally expects an UTF8 terminal.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619092800">- remove explicit -fPIC from build flags, because this breaks our
  gcc-PIE compiler profile (bsc#1184122), resulting in a non-PIE
  /usr/bin/doxywizard.</changelog>
</package>
<package pkgid="3725b8267fa6692442172fde29f3d390b12144f3596a79387163b40914c6ec1f" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ed10c2d4da79ed7fb0e231374455cf0c40f7acdbd6d7fea7fdeb438e8e36774a" name="dracut-kiwi-lib" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b752e64cad7941c0d10f229b98b67fc0fad9ba81e35afcf1004912594b76362b" name="dracut-kiwi-lib" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0dfb21df8e9dcc72d69309f2fbaa855e536d037e17e582e710a81c7a1182f0db" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="cf3b38573fbfa2de4f231afe46f7ad1498d4d2bde7876556c79f9673faaf9a92" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="3649f5d8a8b27e618bbace48ab77e9d72e0e34da6cb4c12be97251efb28a296f" name="dracut-kiwi-live" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="faa682120953403b54fd4194ae76b88e600fba862bd4877e03726a191db651d2" name="dracut-kiwi-live" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2dab1daf0989c3c3313021edb1c3d231a14bf6a057b6a6f90c76e3d0534119bc" name="dracut-kiwi-live" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e3a112e7902e5f54bbc313c074cb355265d6f509b78e3f0509bab11257140861" name="dracut-kiwi-live" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5992b938ca7d86c6fb467e7aeddb477790d3dedc6640a5c2f10c2dda20df8e94" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="72f5c03e5b018ca20af7d0055d979a8b1308a69786dd603f1f49dcd808d2ab87" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="3aa4c38acdbd973a978b9c34295f1d71eba2852ffc9cc7212f0a55eb926d97c7" name="dracut-kiwi-oem-dump" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="44e3c25539b9d0373da7e37a444c036064f4531a0dde5a354765da24c165e778" name="dracut-kiwi-oem-dump" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="345f091d90490716df3f3d44dcbb297f6202a35f895e6a1317cb089b846293d8" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="ac0329a686d117bc963777edaaac93d271d998995ee831a3d395ad1f1aa75c8d" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38582fd48897fc49f4e6a6f5e7fb9c6f246316b40593f7d9965a8091f2287e47" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b9cd8f09665a598b84efdbcf8fab136ceec5ba95693d28b7e9e2e196011737e1" name="dracut-kiwi-oem-repart" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e967ddb427fc8e84744918035f1dd49a1a5bf750bc6449c5631465982c6b3cae" name="dracut-kiwi-oem-repart" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="994294c911e5cfb24ad80fa902376004871bc7bf9f170364318425f03549aa98" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="129ad604b52c1e712cd5116a13521ad972fcd714979814827ef65f28b11869a6" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d7724568b5951537cc0fb7f5054197609f1ffda9e532e22640134019302ebe2d" name="dracut-kiwi-overlay" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9fd7cf9f78858e657013e9742e295d78196ec34511e52cfd0de46cf067e3181b" name="dracut-kiwi-overlay" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b6f6462bb63856e58bb85b9c5036d40c9625c295533b7890284134d99b88bbce" name="dracut-kiwi-overlay" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d62c1aa0ed33553d4fc16a2b2a7a2e9aa9f58f99f101380a14c4af013939d466" name="dracut-kiwi-overlay" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="aa945e606d685d602127eaecaaa72bf10cf81778335447ad7064420f4847de2a" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="afe25ac056ba6e5e371d3674d7bc8b20ebcaf43cdf077699745699cc77a68662" name="drbd-formula" arch="noarch">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="9982558f78e659cf9a9a59638dfe88b9e51fb03432e1c935bf8578bf1efe0f0a" name="drbd-formula" arch="src">
  <version epoch="0" ver="0.4.2+git.1616116365.1e3ab34" rel="3.6.1"/>
  <changelog author="nwang@suse.com" date="1573041600">- Version 0.3.4
  * Remove the duplicate default value in salt state
  * Not to install package by default
  * Remove salt indent and change the order of pillar</changelog>
  <changelog author="xarbulu@suse.com" date="1573473600">- Version 0.3.5
  * Fix issue with file permissions during package installation in
    /usr/share/salt-formulas (0755, root, salt)
    (boo#1142306)</changelog>
  <changelog author="xarbulu@suse.com" date="1573646400">- Version 0.3.6
  * Remove additional_repos salt state</changelog>
  <changelog author="xarbulu@suse.com" date="1573646401">- Version 0.3.7
  * Retry the packages installation to make the code more robust</changelog>
  <changelog author="xarbulu@suse.com" date="1574942400">- Version 0.3.8
  * Add json rendering to jinja templates for old salt versions</changelog>
  <changelog author="nwang@suse.com" date="1576670400">- Version 0.3.9
  * Make file system after initial resync finished
  * Sleep longer in case sync source change state late</changelog>
  <changelog author="nwang@suse.com" date="1577102400">- Version 0.3.10
  * With the fix of salt-shaptools 0.2.9, doesn't need to
  estimate a long time for write I/O completion.
  (jsc#ECO-1965, jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.4.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="nwang@suse.com" date="1614168000">- Version bump 0.4.1
  * Support different backing device per node
  (bsc#1179529)</changelog>
  <changelog author="nwang@suse.com" date="1615464000">- Version bump 0.4.2
  * Fix github issue#15
  * Rename examples to templates</changelog>
</package>
<package pkgid="4fa9ff438c33173c8c233b812e5d06e8bf5451e33024b6edcd528ee07ecd04b9" name="exfatprogs" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="1979dd4df65eae048caa665434c4616665892fc05ac2e607bd014298abf499c2" name="exfatprogs" arch="i586">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="c8cf2661a13fcee3e505c0e669281d76b7d659654512354a8e9c3c60a15fd38c" name="exfatprogs" arch="ppc64le">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="26e46da0abf131f47775b04f8cf9908695dee3a80566f86c6f32fa514a4abc7e" name="exfatprogs" arch="s390x">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="6dcd2aaa52f15f57af8cadb4b77554333d1b60d321469d351b9f0f0d8931f9f7" name="exfatprogs" arch="src">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="693069578958b6fc9ee2ebbccc9dcb1312cc0f95694c662cfc7a29d4a4e69709" name="exfatprogs" arch="x86_64">
  <version epoch="0" ver="1.0.4" rel="3.3.1"/>
  <changelog author="idonmez@suse.com" date="1587643200">- Initial release on OBS</changelog>
  <changelog author="idonmez@suse.com" date="1589284800">- Update to version 1.0.3
  * libexfat0 library is no longer installed
  * Rename label.exfat to tune.exfat.
  * tune.exfat: change argument style
    (-l option for print level, -L option for setting label)
  * mkfs.exfat: harmonize set volume label option with tune.exfat.
  * Fix the reported build warnings/errors.
  * Add memset to clean garbage in allocation.
  * Fix wrong volume label array size.
  * Open a device using O_EXCL to avoid formatting it while it is mounted.
  * Add man page.</changelog>
  <changelog author="idonmez@suse.com" date="1596456000">- Update to version 1.0.4
  * fsck.exfat: display sector, cluster, and volume sizes in the human
    readable format.
  * fsck.exfat: reduce the elapsed time using read-ahead.
  * mkfs.exfat: generate pseudo unique serials while creating filesystems.
  * mkfs.exfat: add the "-b" option to align the start offset of FAT and
    data clusters.
  * fsck.exfat: repair zero-byte files which have the NoFatChain attribute.
  * Fix memory leaks on error handling paths.
  * fsck.exfat: fix the bug that cannot access space beyond 2TB.</changelog>
  <changelog author="idonmez@suse.com" date="1599480000">- Remove ExclusiveArch, the code compiles on all arches cleanly now.</changelog>
  <changelog author="mvetter@suse.com" date="1599825600">- jsc#SLE-16156: Add exfatprogs to SLE</changelog>
  <changelog author="rgoldwyn@suse.com" date="1619611200">- exfatprogs-libexfat-make-set_bit_le-64-bit-compatible.patch:
  Make set_bit_le() 64-bit compatible (bsc#1184882)</changelog>
</package>
<package pkgid="08dfd1dbc5531ffd6dcc651e56aa94c25950ede335ccb115265fe5c1bd3fbfd8" name="expect" arch="aarch64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="6e7e1a0229dd72a9aef4c4bf5146d6cecbc84a48a6689e1438a9aea24e6e41e0" name="expect" arch="i586">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="39d29e782f41f1c7de1207b47c460724a87e3f468322ce100dc2245ac55eab56" name="expect" arch="ppc64le">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="819649a509fe4d1592daf20f6623a669cbb5ef6aa8bd35fb06c2dc1c6fb6d76d" name="expect" arch="s390x">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="a29a18d92c9d26e55deebb79d316589d738814a47d5eb72ebede7b2b94a01df0" name="expect" arch="src">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="3c7e64886c205b0dd015c25057463c23a4eb9f737416580a2ed80decfbc13d3a" name="expect" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="0cc177422a8a630d4c3147271dcbd5ede074415a1278076066763718731cba8a" name="expect-devel" arch="aarch64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="1f2b1b0579a3330c08a0a512c4464de1c2d3d20eb1d4bd16e0306657d60d6231" name="expect-devel" arch="i586">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="3a746943118bbb9c855f0e06480545c2457b7ad2706cea70843055f00342774c" name="expect-devel" arch="ppc64le">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="100c719f221b39decd29264788c40e88600fb6e4aec05c4000740b7dd0f42f21" name="expect-devel" arch="s390x">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="c9b7921d36134e9f6fc086cbff2333993cd63ea9d9ac2455e3ce43b7283a344b" name="expect-devel" arch="x86_64">
  <version epoch="0" ver="5.45.4" rel="3.3.1"/>
  <changelog author="schwab@linux-m68k.org" date="1334404800">- Remove execute permission from logfiles</changelog>
  <changelog author="schwab@suse.de" date="1360152000">- Update config.guess/sub for aarch64</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="max@suse.com" date="1437134400">- Don't ship the 'weather' example anymore (fate#318342).</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- New version 5.45.3:
  * expect.c: On finding a full buffer during matching the sliding
    window mechanism slides too far, truncating the whole buffer and
    preventing matches across the boundary. Fix is shortening the
    slide distance (slide only one 1/3).
  * expect.c: Replaced a cc==0 check with proper Tcl_Eof() check.
- Includes changes from 5.45.2:
  * configure: Extended Tcl header detection for OS X Mountain Lion.
  * expect.c: Replaced memcpy with memmove to properly handle
    overlapping memory.
- Includes changes from 5.45.1:
  * exp_chan.c: Fix a problem when talking a tty where the writer
    dies. Some operating systems report the condition as EIO with
    nothing read, while this actually an EOF. Previously, returned
    data was incomplete due to the error causing data in buffers to
    be dropped.
  * exp_chan.c: Fix a problem with the iteration over the expect
    channel list where the loop code may modify the list, breaking
    the iterator.
  * Fixes for exp_chan.c and exp_command.h
  * expect.c: Convert #bytes information to #chars to prevent later
    code to fail when copying strings around and miscalculating how
    much to copy, for strings containing non-ASCII utf chars.
  * exp_inter.c: Hack access to TCL_REG_BOSONLY when not present,
    became private with Tcl 8.5 and higher.
  * expect.h: Remove the local fiddling with the memory allocation
    and panic macros.
  * example/unbuffer: Prevent unbuffer from swallowing exit code of
    the command it ran (regular mode only, not -p)
  * Various deduplications and cleanups
- cleanup with spec-cleaner
- use %make_install macro</changelog>
  <changelog author="max@suse.com" date="1540468800">- New version 5.45.4:
  * Fix two bugs in EOF handling.</changelog>
  <changelog author="max@suse.com" date="1602763200">- Add an unversioned symlink to make linking easier for
  applications that use libexpect without Tcl (boo#1172681).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- pass explicit -pie flag to CFLAGS and hack `make` invocation so that
  /usr/bin/expect actually becomes a PIE binary. This is especially awkard
  since the expect build system implicitly passes -fPIC which breaks our
  gcc-PIE package, but does not pass -pie while linking the executable.
  Shared libraries are also not linked with -shared so we need to explicitly
  pass this, too, to avoid build breakage (bsc#1184122).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1620129600">- fix previous change regarding PIE linking. Passing SHLIB_CFLAGS="-shared"
  causes /usr/bin/expect to become a shared library that SEGFAULTs upon
  execution. Instead use SHLIB_LD to pass -shared only to shared library
  linking.</changelog>
  <changelog author="max@suse.com" date="1620648000">- bsc#1183904, expect-errorfd.patch:
  errorfd file descriptors should be closed when forking</changelog>
</package>
<package pkgid="d757156eddfd7995b07a921844319939af4570d5cf0e1f68d6eb6e5d35b8b9a0" name="file-roller" arch="aarch64">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="0361a3393bbd60dfce51d1351f2e4cc1082394aa3d22c456bf009cb09ba8177d" name="file-roller" arch="i586">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="0ab5a261d943f6fa1904e103b8db5d688fa6c73e798b5d015c7d9522d2777319" name="file-roller" arch="ppc64le">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="1feacdb9cc8ea89a543ae99f89891686fc19ded5b7476452add62349fc815edc" name="file-roller" arch="s390x">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="28c3c9b1f725d8c9da5471c18e1411e104b9efd2d24e078711ce14cbb19a975a" name="file-roller" arch="src">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="4569b4a5c92da64e1e8014dd28dd9d2ec2147a41c1a5ad788c052ce4a2f9d4c2" name="file-roller" arch="x86_64">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="53419c919154a16c63e7fc08ca63bc40823429ce87dd2f9d4537d488f1fea06d" name="file-roller-lang" arch="noarch">
  <version epoch="0" ver="3.32.5" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1551787200">- Update to version 3.31.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1552392000">- Rebase file-roller-3.4-change-archiver-priority.patch
  (boo#1128813).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1552564800">- Update to version 3.32.0:
  + Updated translations.
- Rebase patches with refresh_patches service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1554897600">- Update to version 3.32.1:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1568030400">- Update to version 3.32.2:
  + Bugs fixed: Prevents CTRL+F to be activated twice for a single
    key press.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574510400">- Update to version 3.32.3:
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581768000">- Update to version 3.32.4:
  + Updated translations.</changelog>
  <changelog author="mliska@suse.cz" date="1585915200">- Add gcc-fno-common-fix.patch in order to fix boo#1160390.</changelog>
  <changelog author="mgorse@suse.com" date="1589284800">- Update to version 3.32.5 (boo#1171486):
  + libarchive: do not follow external links when extracting files
    (boo#1169428 CVE-2020-11736).
  + libarchive: overwrite symbolic links as well if requested by
    the user.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1622030400">- Add 0001-Fix-use-after-free-in-error-message-reporting.patch:
  Prevent segmentation fault while displaying error message from
  libarchive. (glgo#GNOME/file-roller!48, bsc#1186435)</changelog>
</package>
<package pkgid="6418783d4ce0b043c6d2151776f4b0dfc74330f2389f7a94518e9a3cdb4532ee" name="fltk" arch="src">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="35ff5fdaf2e6f251eab54bd3ca0e519327f1a51ea4fca1f0e360145b5b82bfdf" name="fltk-devel" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="75e3604b6662440caab44fcd81b99de357962b7ba4c34ab17c70e66b5ac8f4a1" name="fltk-devel" arch="i586">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="7474a024c963e814b3c7b010fa47f34965a396228b4b4cf1e6a898ad9d5d038f" name="fltk-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="2efaf3b7b7adc69394d84cf459f00f2b5730e4386165d531693fae4fbb421f11" name="fltk-devel" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="cd3e5e5d645f9237b6482d3e4e2059af5f5ab0b499a08bcd0633410a069f8adb" name="fltk-devel" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="2128e79eea7c460566dfbd0e64e48e5f7cd245609af792bcf0c96d6f4bce7b31" name="fltk-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="41bf1c8c6799a568c9d7554376bb9c0f34a330991b072d86a7612756a9fa106f" name="fltk-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="ce3859d4765d4927795474ba6917cc976e16c5bb66beceeae3e2a18167153cd2" name="fltk-devel-static" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="a2c29d42c688512d98b340b0ad429bd19e3b1bbf489a9ffd7589eb87e9c85e98" name="fltk-devel-static" arch="i586">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="b11850947bd12707ec3d4430a75ca1e9a760214c849934583546c3fd314e0367" name="fltk-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="4ef9b451813326bbd09591196fd66f0d7d21125a6698b3743c066c600cb1d9d9" name="fltk-devel-static" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="f271dc8b5eaf55f3df2919f00b6d47f113a89faa58c7100f5aca3d8e7de1cc2a" name="fltk-devel-static" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="a6ea09b4b832ab5842bf21a752bcf1bf7e7c4dbf8cd905b10bd1de18e65816d3" name="fribidi" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="f6b13728d81090e51a4c3400acec57155290a837373e70a488d71c7be5b81681" name="fribidi" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="67f7ac3de54a501d3688652700ea618a2843418ed4490bcb8c66f3ee480e905f" name="fribidi" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ff55d6a4f1269401c99adb8f162b232f8c6b68527c7cd2a9b46f4e93ca9005a" name="fribidi" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="ff11ff5d17734677b94a195b18d82069400d452904ffa2d70533fc55bd5de253" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="b3e5f2b3a4b5274615a1c21ea6b61cbc1c1d14bdc3b8496b9f0c0c52d2f9e1bb" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="6ceb236da911c3701f29adf63c5064b69cd06dc9654e1afed8ec0fb0125c7ea9" name="fribidi-devel" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="02ca769f32343e4e72adad9bd44db16c56e7d58f718bd5cc8406754b77a8b928" name="fribidi-devel" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="3ad8f6dce775a654546ecf9931ef0a73704dd3d00686ed5c60f31c71807f0c27" name="fribidi-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="d4a92fdff7aa0dfebb951d6ff81590e7c96994964175e491794521cd6b394d4d" name="fribidi-devel" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="2e1817cd4cd7762c33a308aabb788579bd215a5d437b5d252609c6add551d48b" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="74bf4a13627a30890ba4d6bfa6d9b8a454a9f439ff50ced6139631add8aaa820" name="gcc-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="039e987bf57266af49c881dbbbc51ffa9af688131867b32f5b42dc2a5d539cc4" name="gcc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="ab6abf01d5123dc047029b41501e6afea0539ca4f26d12551fcf7198f1885b12" name="gcc" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="f1f8deecb4bfed34950f9f603269b23a6144410aed12352d5414d65b60e7401f" name="gcc" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3c1a98e87157baa859a598ae91dbae63cef761ab03760c340731faaf5f37e651" name="gcc" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5b8f0936edf92b82bab04166c9be1f19595ef13398fe92b590e612a790bde30b" name="gcc" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="4b7ecf1360bfbe5aceceb6e7841d0c1eaa46e1b04ed121c6f87802e4d10618cf" name="gcc" arch="src">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="49297d3f268d10ecd51abb321ac74e26180f086e4984fcaa793acbdcae555634" name="gcc" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="cb1eb9cda7c7b090b4680bf270c6fbd6a2255561c7be7861a1a9f8cd7e0a8ece" name="gcc-PIE" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5624d3ffb19bc70b2bace7fd1b5ceb8d598dc41f50ca4c4a6bb51547f93e0310" name="gcc-PIE" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="47206f1f3579675dfa3ab537256a8381b640c5f049b735c34f3d142788149264" name="gcc-PIE" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="9ddeda5e46d8df79070119b31f19c78de5f46dad69c0e1174dd162c69d540b1d" name="gcc-PIE" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="fd6ae6e4e86bdd58ea9f4fae3065d0a6fb893cc1a2d61f1cc31302984dbbc811" name="gcc-PIE" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="a1ae706a50a53c3b43a6e6dc29d10e18e2e819e50d9710af00370b481f13c3bd" name="gcc-ada-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="05160b1b9a616855b9bf5973491333028a7dbb73c5f25b3789da7a6cccf84c8f" name="gcc-ada-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="55b4c970cbb9f17e35f0412a8e548c0c6778d4dd8ff3f95b4c2a90a06e748c8a" name="gcc-ada" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="e474b2d8e0816781fb79e28ca7c2f3a5fb13afcb3e3b6d68f6b6684f02f816bf" name="gcc-ada" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="2078aab863a07e69dd1dc99e4a0dba91257619f7c739c19ccfb9a9d72cf13fe5" name="gcc-ada" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="35989bd58c16b140ac425672dc826dd5b82b2b9f23f6717129e0bfd72f02b555" name="gcc-ada" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="366c2d05f43313707d253192bfead2f644a948573e3d77062e521afb752505bc" name="gcc-ada" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="7560c99b7c7602c34358615ce1371f79bbe2003a3a318c9221b5fea2f5bb9e54" name="gcc-c++-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="afdabcccd48ea1a80488136166754354df57616710ceb6f61bda5226d06c1382" name="gcc-c++-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="227b156bf4df154b1b9bb59c61dca29657cb51d00bbb9b7c901f82470d525c9c" name="gcc-c++" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="ed086b58313b42c7a41700385336a488e5de60730dd943c5c0ab3e4dc34e0dde" name="gcc-c++" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="323f6c5615bfe73f3a6e44e0b22ff4a86bb11ed415685581c8e119cd96a3fa5c" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="abe2c3b266c62d61b4cf6a79d46c685b90cbe5c5b8ed31995039dda5602ad967" name="gcc-c++" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="388e414fb2c4ae2bd0d1185d6a0de9d4413f9dcf6d0b2728c81812e40acc92d8" name="gcc-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="7a6e9ace191049ebbcb25fc8c76359389bd7bfa5d1db333a4acb2211d1d9349d" name="gcc-fortran-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="ae2810945e9c5a807a45b1524a25c60300ef7aa2d0834ab9e6c40f5ab7386135" name="gcc-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="2f8106595ce09126fcd716af4b185a73a898650775b55cc0c10e1582973e82c6" name="gcc-fortran" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="aa405475d397efe0eedee401a3e4183d9c76122f8543cec6ee819974f51a0a8e" name="gcc-fortran" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="0538c95c6470f10a1f1c6e99cd0a4cde3d913595d9eecbd5df247554492477b4" name="gcc-fortran" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="c687723c81a592073688be423b7e48a6272714e5fee71b3b370b86a632a2f1e2" name="gcc-fortran" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3cee9e0a515b51c0ca3ba46e6e2dc7c74dac572a4bca60dc5e8152376860c835" name="gcc-fortran" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="32a3c422bb881931665622aeb2fa46aea5126d3c1667e31b3fe8f76472aba45f" name="gcc-go-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="53e3049011147eec1f640814d5c8bb6a1a2262b9b13cc0753676fa3fb8bd47fc" name="gcc-go-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3623c904db7db4964112d4e1e1f92df3bbbcd9e37afe16aa2b583793dd7e309d" name="gcc-go" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="133ee1cd31a0722fdcc9215c0c47fc71d7b320255a463321b909a3b0505c0c08" name="gcc-go" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="3d56d873bfe595175cbb3b39687258c95239d7265902a5cbf0f792f4a268c51c" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="86630829846a7a001bed3e9e6e7eb1ec9319d69e3a8ea4229333374cd6305462" name="gcc-go" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="adb778533881b3fe7da695bf838a378533168e058e338150489e1918f2517468" name="gcc-go" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5fb33ec7924593b29059a25010b1f4b66c0cf31ee06bec78c4d5fcbd9f74f46d" name="gcc-info" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="f189ef88bc5f0729ff217740b2e0ee83ce1528ea5a7bf9b3cda61401420e36cd" name="gcc-info" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="57a3be126122b5c5991320ea00c2e42061062c9715cb41f49f09ef44debeebac" name="gcc-info" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="8ab200842a424737ebdbb3eadbdda2f32ce29b2d46f6788fda27d7bd7b04f7af" name="gcc-info" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="42c44d011f98c0fd6a4958cafed167c1a4580581ca783294b5898b2920047747" name="gcc-info" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="431e307178132da02a5590d7a40226273424eecd766235cdd74269fdea575524" name="gcc-locale" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="5769ed4b5ca3b9156916ad9a3d2414cdc05521b903bdd5e26bb73d72c3fd54e5" name="gcc-locale" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="0822c0b5a9b8c3e27dc6c4de385bbae60c801e8a88b7a11fd757eeaed6a9be15" name="gcc-locale" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="c05549c0f5d41ece6edd8cb190a2fd4326e6bac43f6bc70ff3c998f0355a79f3" name="gcc-locale" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="e82b324738a255eadd5499e85da3556cf1aaff17cab1a248267a054e51495920" name="gcc-locale" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="466d467d98ce794efb1a301fed618c848adace77904520aa1ade40e22a792954" name="gcc-obj-c++" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="164984c44eb0d5f4799f618184d14ef3b1157b79ccd636910c206e457a10dc73" name="gcc-obj-c++" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="b3011acaff5189c03a060e4f0906db42816f7429836f37aea07da9f4b495a94f" name="gcc-obj-c++" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="df6690b3d2de88353c7a4f285ed23cda02947b9577327797e7e2de4eb410f02d" name="gcc-obj-c++" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="4f3b192d97f125361f85508b0bb7ea4bcbbe170243c77fad42a97c0abd8159be" name="gcc-obj-c++" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="141f09f554847ebbc1132096225c1176c7c853c997cc93dbeacb6246e513c781" name="gcc-objc-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="08b5e417d5e5d342f48e9894082f723e2c95055265348e3debbfd065524b4666" name="gcc-objc-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="eca4869db447dc9250b08daa87a4591877f4d1a7eea31389115babb21acf5ee8" name="gcc-objc" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="2c5ebaed84387d8de42754df3276a49b786593ea7c6697226833e20746d5f859" name="gcc-objc" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="883f70e20b2674d3e66f8e6beab34dc777dcd44aeaaf6ed5f04773c939de15e9" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="d6784a0e8884721fd3b8d9ebb8a13b1bff51fe0c735fd0813f2edd4c21163be7" name="gcc-objc" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="88e29b787244ab598f1e076f103b98b4cc04979dd1565316fcba5e5bfdd7cb5a" name="gcc-objc" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="486e1301e7bdc13981df2642d6a434efa1a94ea76de2abc4a2e3b23e6749bc5d" name="gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ccd076e537f662edea9be353e1bdb9ccecf2350fa5a1186e8dc8cabe12e49850" name="gcc10" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c2e4f3f5b1cbd83d0ea174489ec0ec942646bd847531b6f842339182af3f6c38" name="gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0f1b766eab27f64c9a4a4f45dca7648997383c5758ffcd6a17571aca986ae908" name="gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2911a3ab6c77f698d658f6187c94202c916ec4f1e53bcf1b1578197f481b33f1" name="gcc10" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="24e4056c1eaa7077fd6796925b2fbbffa0c68426f7ad114a24db7952b3764fbd" name="gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cff99fe15513011ae142cab6fe1799588bd51c9f0851cfe27fbb4686e2a402a4" name="gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4e1d8a70b0405fedf30ae8dcb6fcc45adc02709aeb1925c2d2ada1b19b9452b2" name="gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="35ba526d754568f2eb9d3163817a4a1098ea3db2f70c25ed9d5af1f78ca7bc07" name="gcc10-ada" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="aacf8430cb770211a4c9fe29d4024b2f87e951f9e45587f4480e22efe9b6ae13" name="gcc10-ada" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3c64ac4d7462ee71ff43082f29936dcec39ab3dc9c683a61669fc8289af7af20" name="gcc10-ada" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e2c0e86c8439500d64da37a12d572d283f69b5592366a2aad102a9bee1dc284f" name="gcc10-ada" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="be5d332ae025bb1b94a65683b53f10b51951bafb5c17f5e0024d02c0e8d9e39f" name="gcc10-ada" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c597f72375652799db418c101abebf35adc808593aa50c9984345de2a9e34e9" name="gcc10-ada-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6c04c2dc5508e30df765637de13f3c272a1020c9cb051a921683105d59ef8100" name="gcc10-ada-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f80326a8e8d42a79ffebd210115d9f98fe0d7187e5ec091115eb64228cdf305c" name="gcc10-c++" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ffb35264f69be9cd1c10789db6f2b0812b7481314b6c8dac2ea3c05911b2cbc2" name="gcc10-c++" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f12f91b2e4754c4a4069638ffe12471f9fb2de1445e8ac591c96384ce3169b11" name="gcc10-c++" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="657283efa4a05e344af9c4036862c9d28dda9f7266190ac6b3e8b77144a87356" name="gcc10-c++" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c76bdbb1717851f0939cbfa8508e4b2dbf4054646dfcc2e2b27350a8897991ec" name="gcc10-c++" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c33a594a9a116b0407ad13a7663503f089a85030b29ba2cb05d3643de1f9b9b7" name="gcc10-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e42e59f5212c4b9346bb6b79011de0a3f1ee2632772f9e948cb8ec605b6fa290" name="gcc10-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f9c7617e5753393a415a313db4551fed41316872e727efdc8cef0a14bf214b3f" name="gcc10-d" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a5948b48ad7774c43417ac0bf2fb947eb47e4cfbe77a0d0d51ac216bbf9e663c" name="gcc10-d" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0e7b249e063a0763940fe120fd02e2e1bc9520b9d502522c4ed6b0526174f9c3" name="gcc10-d" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="15901668b5c1b4436f394328b919504c5e17893ab49d9ef48506f0de18b3392f" name="gcc10-d" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c8fa94cc9a58d7fb851e977b9386b37374cef3b5988859a076ccfe45c947874" name="gcc10-d-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ea3f33e1e0fa1bbace28943b7e25c409cfe649a66e942b987ed785a1fd43c233" name="gcc10-d-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1319b8739e41f40d006a6185ffccaaffce75321e45ae8977e6340206925b3b2d" name="gcc10-fortran" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f0956ad8abe4d9de5f851e083af0c24a2b6c54f8887f3d22f5cd8c2e9ab7d6b2" name="gcc10-fortran" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b6d13327f6d2cabbea1219919c977ee1b21925d913bc5144fb52334daa883643" name="gcc10-fortran" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="15948baac57504ef4ed0b15fe77e9e0b2e938f73ce3228e63e1d235cd20f04a3" name="gcc10-fortran" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4f32e7cb55406cc91336f697343bae4e593b92bcf03894bcea0086585f993712" name="gcc10-fortran" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0403d13a1de3858063cb36253378b00bb20b79694dad0c3bfff34bdf1f9aef08" name="gcc10-fortran-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a6359da7a009544cb863f51689837f887220a7438d248af1a0e1cb91a13b2cb8" name="gcc10-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9ccc4036a4fdb7b9f7953a11bb957cde51e12888086256b9d90df711dd67f2ed" name="gcc10-go" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2677eb79daa8ef133193f78fe20662d20a8ed2ba1a9903d5275c6d797c6c3ba1" name="gcc10-go" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="684100c63d6cebfcfb4dff8a5691b890bff5bb631a915a972f8c45118e57c064" name="gcc10-go" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7fcf4e04f5ec573faaceaf11d17627879a6d3222ba5e8abade29bd486f451a1e" name="gcc10-go" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6443807d22d8d6fa0ca97b199154c872794a285f30737408be30f89666ff4812" name="gcc10-go" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="58d2013bf5b77ecb1d5d7edb0c56b892a793ee121eabdbfc859c5b2d16d3fbd3" name="gcc10-go-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6f9f7e7f6e8fda5e35de60873d6ea9042a49ff8886f5d8614a84991c3bdb343c" name="gcc10-go-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="234e1e07647b246711c196677af4b9da05d5914d723fab30dc749159af63b3cf" name="gcc10-info" arch="noarch">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="02970939bbfa645d473a80c57c1414bbf43a6d23955a4b3f0d3a82b49c237576" name="gcc10-locale" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9ea7cd42bc83d31785029229f7bc04ea46d58e794ec62be5fd32b5bf6f312e01" name="gcc10-locale" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0498e335bcec76a1c89ce6326a91f60ae4c6030ce8db14f7056acbcd67ea437d" name="gcc10-locale" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="90fa54b5896df925ee3a2e5783e3b7735db29e0c1376e163201ff832f5b5da8c" name="gcc10-locale" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9c2332331344a29060b7bf72ee08c2704704df0648e0516e80a37b2044c82bb5" name="gcc10-locale" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ca00b07847d044da9c4fe63a3884cfa290f2e26f53482d280f341c0132ef6e46" name="gcc10-obj-c++" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5080e9b827f86e2f7ea76b6e0e2be2ab2fc570d6384afbc9a30590fba036a089" name="gcc10-obj-c++" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fa1a72e6650311783a50fcb9e48d99039442649987a5008e47479bf7add7d028" name="gcc10-obj-c++" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e7429e0f344f1cdcf1f8846a202155880e42d15d04a533df65a905c9276d0fce" name="gcc10-obj-c++" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="883dcffdce8461cfbe471ae96eba43db0ca5e59ebef45e44a38f77d1ee2ff52c" name="gcc10-obj-c++" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bb14c0943a394cb0f417a31f8e936f15f40954044cddda76b1c0d1c6cf302d40" name="gcc10-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="38b56755ff1325ad3ea3d47de0586d132215a3d1c92c49ad7a134ae082e16bde" name="gcc10-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="30ae395b121eba08d59fa948131c80faec88be26567d4c125dfc13867f608fa3" name="gcc10-objc" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ad08da8f20b1841a8f24dc8271d3d7d99e6d4694e567527b53ced5814ea123b0" name="gcc10-objc" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="78563ead062133a484798674fd041b0e052001e6e282c9fefdc4650625e6cacc" name="gcc10-objc" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2e3b83935f9ca9c75f7b4de1897db2d1f0eae867a5c19ce9c546ed704f123f87" name="gcc10-objc" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="45341985fa19a90808a78406d0d93eae2351d37d197188d86587c4d83c977ddb" name="gcc10-objc" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0a200dd391c47885f6c701b7cabdff709f4424753e1d7570cbd07e7d2eca119e" name="gcc10-objc-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="88029da9d3d229e3a9de70e017fc2deca4d0715f5fe9294cae44749cb769aa70" name="gcc10-objc-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7d4c56cdf650c2a5d437294014d6119dd320f776996c19960402874cd8a4d7f5" name="gcc10-testresults" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="442553ea8b715f341f98a6e697ca4dec7d73fa6215d0bbffa417d6191677d624" name="gcc10-testresults" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bccb90a53c546e3a037e74ed8baed5953456afe32ffdb46bedf50578f1e0fe56" name="gcc10-testresults" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f831467266ff071211f1bb03052487a99cd436194a5454869da627d2074b4037" name="gcc10-testresults" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="68df5208fbc50fc32b8f00bc205ac320f8ee979a01667ac306a7dfacb01c01b3" name="gcc10-testresults" arch="src">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cb5ba9154832310f48f8ec2d5ae4fead6faa8e69f22387ef9854a2fe6a0fcd68" name="gcc10-testresults" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.7"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e68358923a344b12948c88af16ce677cf8ec9d560453efde071ad07c0021beb7" name="gdm-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="8e535e4b71f9593a637ecc4ab4959c6c22b82dc780f54d23569f60bacc162f32" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="04b01d5f18c390d19be5620d81eafd734bdc2934ade56e19ab56952f350cde87" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="aef88ec7c89898cc3c68ee67ca5d66f4788d92ba590a253795be4b915c64eb89" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8e4d5949d381ea5914ac489446934b95e35975a117ae6f2a9d14aa4ffd749d03" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0f22a3d5a854c4517085f7511d8a840853942cad1228a8d3e93cd151b6d7a0f8" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="a50ae4a325d973e71d5ad536b14d4cc744363b4f53b85941632ea304bf54761b" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="96c318eb20c57163a1e22a99437b49bb772002219c8814055a76c79b1e90921d" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9a28d885114d175e7d497c82a9509058f75201f9ba942517c1e63b93408a1dff" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="90bf3aef56fd76f4d6fbf184786a7495a9e6b478822bfb6b01ed10c43430bc44" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="4a3440a2727269f95897192db7d1add14eeac9a2c5f6d83798d48dd01d400410" name="gfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="dd14f6775b73d97b7e1014260b3b8404a8a27b71ae17bc62d1e7d654115717fd" name="gfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7366a44359d17817bb2afe40e6e00c824203bcde086d587f726a184c1dca062b" name="gfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7326f076fb17e1b89b65b5eb96f657cde5dbe26a537d364c9ecf6c2a2652c2f6" name="gfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="dd3e775d5092dd779342c01d8b665e02d169fb1285047cac71b470013d2c635d" name="gfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="ee823f6dd7e731f866b2f43e6e93fded84fcc48828483a8afaba24c261878d3c" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="d81f974b65a942356cd97c0c69f900277c0a61f3ce5cb8eee19d2f3469bb2d1e" name="gfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="0c42e9366c93cf5d07894867f8f48f49fbb0286ae3ce3955300e98e7c9132c44" name="gfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="6d44765c282386bfc640129aa888c55baf56e4528ef986c962fef699d2954ed0" name="gfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="b6fa6c4392ca51618e80a9d40b0489ec4003b05af690a311f5aaf4da9218107c" name="gfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="c95c73ba9de6c916d319e0d5df90d1490a037bf35ecd14e3e74e9562d1977b18" name="gfxboot-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="9eb2efcd9f0e909641393fd306eeb1c94c6f44f482ed9d98b428b77af4202a72" name="google-guest-agent" arch="aarch64">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="11db9ef0f65a618bb2df9c277fe35fea2cad91b2c0474593e6cad645bb4fc9a2" name="google-guest-agent" arch="i586">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="9920caabeb50eb6c4e295b655b7ade9da0250cf478ea5d07b19a34405988a2da" name="google-guest-agent" arch="ppc64le">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="c12980e4cf5346dd13d77d9e9e312fe667d8612f963ea5bb1bdc03ae08131789" name="google-guest-agent" arch="s390x">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="6816d21f7409610d5e935d0f42b16c84d1be30192435c43acf87cfaf0f179b3a" name="google-guest-agent" arch="src">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="f53ebba6e99fc93f57ecc6e508ef84cc3b1cbb2f505e554156ff06bf5aeb0ba9" name="google-guest-agent" arch="x86_64">
  <version epoch="0" ver="20210414.00" rel="1.20.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
</package>
<package pkgid="b7078d6d6150de900c398eac9168057238fd844aaf32571b3e9e6694a88fa249" name="google-guest-oslogin" arch="aarch64">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="85da8b31c4e743b0e6b3113f2f45045ad41f0664e81b661d5ded020591a45f2d" name="google-guest-oslogin" arch="i586">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="63d7b79dba0765c7d1ff49038ff4cafceff10c333aa3c78670c360d7bad19b96" name="google-guest-oslogin" arch="ppc64le">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="a26e5fde030f8584dfc662247dd2fd1acac75b7e3aa0cba11cb9396480443cc7" name="google-guest-oslogin" arch="s390x">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="fe215458c2bfce0a2643c9e86405d0aa2cc7020bb8c2a7ba09bb9f3fe1fcc302" name="google-guest-oslogin" arch="src">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="4c7e9ea16f4ded03e2914d7440a33e651adabc3656f5c78528af6676cda2c4e5" name="google-guest-oslogin" arch="x86_64">
  <version epoch="0" ver="20210429.00" rel="1.18.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
</package>
<package pkgid="2be18315d5cd3ebc94c2b36b1c80da68b982b91b2cbe8c9b90fe4485ca8ab9b7" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="145f78518f33ee4a9051810b41da7bc07fd6b9455525dca5d8bfe0c615a7cd49" name="google-osconfig-agent" arch="i586">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="72d62dc0252d83a16563bf986aca8c0d45aaaabb4f18355544b8089214f70067" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="d5e3144d7d8a1d02439c6fce08e3075a293654fa906ca53c83ea735a1ee5316e" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="86ab789e6178aed723b10802a4404a17d5b865bd713f5add1567b9037caaf8ec" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="c095c897b0ae4a9f013c48cadf8a9f2603e86269b0e9ab813bf3e68d75608ce3" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20210506.00" rel="1.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
</package>
<package pkgid="56d033f507da5fc6df19061ad7d46a8ef1b3955707a92ae28a5c7d0bc6d61186" name="google-poppins-fonts" arch="noarch">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="c4f2a88da3134d4de28b72f049a039e7f9461c3107d537ce8c9272b64a5948a6" name="google-poppins-fonts" arch="src">
  <version epoch="0" ver="4.003" rel="6.3.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1611057600">- Create initial version 4.003</changelog>
  <changelog author="fcrozat@suse.com" date="1611144000">- Fix url to download archive.</changelog>
  <changelog author="fcrozat@suse.com" date="1611144001">- Fix copyright attribution and other cleaning on specfile.</changelog>
</package>
<package pkgid="aba48e99ab35986703ec3a674580dacdf49c429d23389c606cb5c161caddc43e" name="gpg2" arch="aarch64">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="b12e9e6b602f9994b0fbc4931ad673759e10540ce346f25608587f46ac609c8d" name="gpg2" arch="i586">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="09de0f6b8f5b46e7964a789d4d1281c84738b69c1ba009f8e761a9d6dc4bfa17" name="gpg2" arch="ppc64le">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="1983e595fcf9e7a54cbef00a514b5255ec33c5b9193768b6d4e29ddd6401af37" name="gpg2" arch="s390x">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="3d26390dc98bc068357c26e574c66df781655b908805aa5ce404716a1cc54810" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="ae89dec94d7ee35cb67796f027afd2bcdb2edda8db67b181b55378b95e560e47" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="35e609284e478c4943e51fa0009c921b27edccf858f7eade3fa16ce5d0d77c83" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="4.19.8"/>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546430400">- Security fix: [bsc#1120346, CVE-2018-1000858]
  * Cross Site Request Forgery (CSRF) vulnerability in dirmngr that
    can result in Attacker controlled CSRF.
  * Added patches:
  - gnupg-CRL-fetching-via-https.patch
  - gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  - gnupg-CVE-2018-1000858.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556539200">- Allow coredumps in X11 desktop sessions (bsc#1124847)
  * Added gnupg-gpg-agent-ulimit.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1563796800">- Security fix: [bsc#1141093, CVE-2019-13050]
  * Denial of service attacks via big keys
  * Added patches:
  - gnupg-CVE-2019-13050_0_of_5.patch
  - gnupg-CVE-2019-13050_1_of_5.patch
  - gnupg-CVE-2019-13050_2_of_5.patch
  - gnupg-CVE-2019-13050_3_of_5.patch
  - gnupg-CVE-2019-13050_4_of_5.patch
  - gnupg-CVE-2019-13050_5_of_5.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570017600">- Remove self-buildrequire [bsc#1152755]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
</package>
<package pkgid="2af53dbf409e2a82de602a4584eacc5bb80d3ed4c05c105111f11be8dd92ff44" name="gpm" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="e29d18fcd821454c9c99030403a5c58d3688b8d5bcf9f3fd49d87d078b8d2ca9" name="gpm" arch="i586">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="c5cf06976ca090aadd3a1910885d43f4d0e4b154efabac5fa59fdcc1127081c0" name="gpm" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="9c046131f880afa50c0dc9aa726a4fd979667408b91043c7cb63886fc5c95408" name="gpm" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="1b456261bf4da85ddd2ed34ac0de428f6623aa90dd5813e969bb563bd862a14b" name="gpm" arch="src">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="5c609b63c29e5accd43e0c5c13d8014b9d5f41b0080248a9dcaf4fa718716e1c" name="gpm" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="dba181d17b4a6730d40ef09c86497479a8e51ca75fce0f09e6fb9492f96f69c8" name="gpm-devel" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="70a04071ae6c4ebb2ede773a2ac516fcf1538ebfab501d5cd35bfc59709adc3d" name="gpm-devel" arch="i586">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="db39b6e05188a113da747cc7f71800366f6d9e540fdb93f24bad0a0a6eacebe8" name="gpm-devel" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="845cc102182e0d2cc281b37b20c876a9f7b7438e2c3f953ff83d6cfa2684cb97" name="gpm-devel" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="40bdccab487c49a42a0d887053e0fb9211e7f8691e982decf511113c39b5f5ee" name="gpm-devel" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="480f4db33347782a735e7f33064919060c2c505e3361bbbdfe704298074cf4f3" name="graphviz" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="3a7759b304ff44c309b80288d0366de64589119ca193220442afff1631f6b9c0" name="graphviz" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="5ea4257c127c47351282e615ca2b6049e4eb4cc8db90ee92f0234cea24af5a31" name="graphviz" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="5bd2650dfe9e6229f13a2cbfbe69c2366f807b4c0b00b990b492105d72c081bb" name="graphviz" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="b071bb171a6e8a26eb2d13db5fbf63847080b94cafb0f84b81fdefa3728900f1" name="graphviz" arch="src">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="c4547d95846a11be5ea19b4a3a59b41abbf6817b2f4df34aaaa9277bfd8bdf57" name="graphviz" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="ff8d2b6e1296d4a48deff7ee5e0ac660a6b26459dab8f8f27c4d38b24f0f3322" name="graphviz-addons" arch="src">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="916a07dd618604a005c5615ab5b02998e557533fb4694142286803c66f7f2e53" name="graphviz-devel" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="ec602da5a09f3ff6dce30b1b4232325ba885168ff7bbe90c3ce85b96c636a61b" name="graphviz-devel" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="c213fcfaf3366b0dfdeab2cd834f0f2c6049c1ac8519354a745481a906efb18f" name="graphviz-devel" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="bd267e84db01aacbdc4861d620bc29423ed1029e89d51835116ca32f3787affd" name="graphviz-devel" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="2d3cbe1463733d85887a8b968cc5d9169af006c4b173598adc6400745e141c1a" name="graphviz-devel" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="f119a8f1e1c6e8e200cdfb06be8ca3ddabbd41a4d1d61957516614f1cb98772c" name="graphviz-doc" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a37047f42ef4b0eb8f9dd32f575013414df9cceb2bf11d5ff7b4df539deffa9f" name="graphviz-doc" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d0baf26fc90765249aea0db157cd42c57e482757a1578170a74e2488274f48bc" name="graphviz-doc" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="95ad5ce270ddd2dd611bd1ed342f0a5daf20cd9147088ea6bd5e6eba93daa93f" name="graphviz-doc" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="606d206db63368fa5a1beefab333d087b8037ee65014403dfd1bbe2329d270ca" name="graphviz-doc" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="3548565a299abdc0ed434f9bd536b2419b1dd912c0821e4ed213b0b0287bc818" name="graphviz-gd" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="3855eee0ef689cd203a08c3bc3ce640de1cb7356ba6a410a3f0a5cf2984636b0" name="graphviz-gd" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="087c4ad4ae9abd8c1bad70a409238f66ab2e7a2afdbbea284951e1e3199ffcf7" name="graphviz-gd" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="dedb5530c0bbca336eea777f793761ccae3ee2acecdf183b56819ba9e56720fa" name="graphviz-gd" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="bc9a4929cad2ca1140a89b5fd14693faed1e7e9b37e4a0f51b103223970a7a8d" name="graphviz-gd" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="1dda50e0fb473a9dc8c95996dcbaa1f52861a75b49f6e3e6c1551641ca0263c8" name="graphviz-gnome" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d4f92a276366f48da97899d9b097fe37dbad05a92eec0181ff3328f957a8d316" name="graphviz-gnome" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b8a022e5011d7801907e0f30836259137aff034606e2da31c6ec4b59861c2b8a" name="graphviz-gnome" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2e8539f1ec9c0f87347c31f560cad5087534ed91362d979d30fd7d3efefc64a7" name="graphviz-gnome" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="08b96773351a06dc6d9906677332aaf1074dde449939faa7e6aca0cf617724a0" name="graphviz-gnome" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="83c4a06f28487fab4a4f6e862a41cbc06d651bf4a77416ce370cfdd6c1d220fd" name="graphviz-guile" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5d4c90d905c6a15564121d37ffba4258f02f4301266b0ab02af592496413bab2" name="graphviz-guile" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="60b338eab8d40205416efd45839f139b146debe181ecfcdda3109ca06da89d96" name="graphviz-guile" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="0ce30d260ae99b10619a26bacbacdf79b423ee3ebd2618f39a39c03af1d98206" name="graphviz-guile" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d68ccf1b71fa1c8315055b89128f24bf99de72313c08b0f3dd41a97232031b9d" name="graphviz-guile" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4e3a0f380582a43c8fdc78e00ef7fdf5a8eb39958f3a5777f643c0d19dc83782" name="graphviz-gvedit" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="dc4207f409827d7c069b73c19c0231107b0685769bd6abfba8a5e79d5b8aa821" name="graphviz-gvedit" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="54189d6c5afd09e50b96a813c03883113c6170e0b8a0252d9b5fea814b746756" name="graphviz-gvedit" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a309b0c49b15be3368e84415ae7b4443a9ca7339997ce187be6cad3a6f8ca705" name="graphviz-gvedit" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2621d6b00678b1454692098ca5d94702f7b1686fc237e3854acdd08381813d8f" name="graphviz-gvedit" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="95b18fa9ec0d74410f98ee4b48f2a7881bb93985faddc4c3f8290c261597f5d9" name="graphviz-java" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6efa43309bd3cff7d10a2448f80833296af14b593e070bf0847d2dbeff3cad79" name="graphviz-java" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e81150147bca94d1587851c5e0ec7396c8839b2265894eca0b6c2ae0ed2773bf" name="graphviz-java" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="9b62ed2775cbb6912676f3fdf31ebed1069106b854c45ba89a27c857bfe82917" name="graphviz-java" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="f48917babf020e8bc9c526c44675290d7aad46cb46f4aabfadc370696010ac38" name="graphviz-java" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="c79684b419761f4a74d461531e27d2d7cb6bb24104dbd80f6c05a0bc498277d1" name="graphviz-lua" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="d42af86ba6ea4b82bdbd4ea9418d772a2e442915767e5317c0758dc669f8f493" name="graphviz-lua" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="a1f513a5a78cc4d290f5d74d02f410d28b94ac4d515b9974c1de8514d3f50453" name="graphviz-lua" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="2f10e4e478361f95f826ca5eb5d736018f0ed94fbbd496cf60c2f62198914b84" name="graphviz-lua" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4a6fa6374d07a523b4e53f1b87319dcda54e3921e3a0e2777c0c23136e69a1b2" name="graphviz-lua" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="9ef1c260eee97895587ef963f7d75cc8e03265ad7ed817199c59cdd01d20da61" name="graphviz-perl" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4ac845079ab016945aeb36fa15885428ad4ddab0237222876f5f66319917863a" name="graphviz-perl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="e5d0acea702e0290aee50d7b7dd96cc63a45f2cc089e137de80a3ccbbee02224" name="graphviz-perl" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="4eb120db044e5a9ceaa77082d7d513857c51b241b4f9d619d7accf99ad2ee863" name="graphviz-perl" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="14b7baaa1a24643bc6a746907b2a44b3fda1eaaf901cb680208521c8ced4c326" name="graphviz-perl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="36758276cfef8e78fba29399e2afb01357755ce9a68a320ad5c39b0cc42be6f4" name="graphviz-php" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5a2e864385dcac416ddaf468d44118c42680212d3cec5d1b89fe6d89668dd7ae" name="graphviz-php" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="abe4eaa892c7c964ab5673c24860ce6c98eac09f647244db7ec85eafdbaa0a5a" name="graphviz-php" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6aa9200d211bbbcc2814b74d872d3a4db5f036eb82a139db51e760e6b74e32d9" name="graphviz-php" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="309e2946e67f7559ea14dbde32440065de8c50a9da9e9d376cf8648d9e04a84a" name="graphviz-php" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="348df5e6338aa443fa936319ac977ef1ebe82e665bcc9fca3105c8eaee88b8a0" name="graphviz-plugins-core" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="bcb18a2a9b052a8486a1bf5ed02982f11f6c27455fb4e3d4f702ea63005e4910" name="graphviz-plugins-core" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="db00f48124cae9566b8c170210a4f41e3528ee28e35ab550d4b8cca215ef2e5b" name="graphviz-plugins-core" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="9a3c0588a6c53fd7666f2a4fed3a67a47a8234a41a0d4ec99b67edd123c730c1" name="graphviz-plugins-core" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="db2b597b7b0225cef0939fb3d69e0e0d970bfc2f7d6c074fa94b095a038eff3f" name="graphviz-plugins-core" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="083587ebb2aaff10aca1febf861370212029d439566c5e642db52c7517aa9efb" name="graphviz-python" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="8cbcb4e24b6fdd1482d120eb5491535ad141df36c07983d60c998a744076c8bb" name="graphviz-python" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="90caf873f6ae055b9b378361ee2d087f2179e6205348370476e58273e5d79100" name="graphviz-python" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b71c891c8d102af354fad327c6546a20a0f5d5e1e1f39d964a816e983f7c2e7f" name="graphviz-python" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5423c25131841cfa27e32e7b5fa0efccbafa6df6e5ff25ff155640238f954e97" name="graphviz-python" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="412b5eca27348a574928056b6347dfbabaef37965a06adc7e3dc2550298e0f49" name="graphviz-ruby" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="0012b8264e3be54fb18cb54d9547f107699847b6794fada3992d03af4128f031" name="graphviz-ruby" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="01e7ca179e428e79b98af82997064bc0b517556d9d9886744739e7823afaf4d5" name="graphviz-ruby" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="f503063bb855d889112094206e478fd231d811e524db23cf8523dd7f992b3185" name="graphviz-ruby" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="6bdc9eb710129fe6ccbf61b923429a5164e75546f3824b7f65317084e3dcfba9" name="graphviz-ruby" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="0d515ecaa630f900a67e2e95256a5325733b4e95356aa31398d2362d1743f060" name="graphviz-smyrna" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="ce9c04094d87053becb749ea39e4c865cf47f6c7e39cd3ea1a4b0b15259f5cba" name="graphviz-smyrna" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="61607a06d2eb257febc9a9485c4d582a6289c5256e944deb4398376104e6114c" name="graphviz-smyrna" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="485c3774c74108a9eec84c98b9e4763d8d85f5da08015d446153afec28779faa" name="graphviz-smyrna" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="99a1e2d2544bd9b597c3345b0c3e9a475780ef7fd50ddef9e5f34e987884a77c" name="graphviz-smyrna" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="da4364d7bc9e4e4a0e1929aa5a2987c3b7d771c309da82729a6ece71d52f19c8" name="graphviz-tcl" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="c398a72dd6fb8ced47729147a3645d8a8f4467b7627852bc7eb6f5d910e905a2" name="graphviz-tcl" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="5d0ed96f950f8feebdf713c37e6f53645dba730277d6eeaa8c6e719fb4b30472" name="graphviz-tcl" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="b238c22fc53e8415ad8c66066b5e29dfb039fa38dd8a9476fe0ca8cba021b447" name="graphviz-tcl" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="1876a437a7bb214c875ce58071c9b181d09fef642a48bf449b147c4d366aac31" name="graphviz-tcl" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501675200">- Update to 2.40.1 release:
  * Remove usage of ast_common.h
  * network-simplex fixes and optimization (Stephen North)
  * built-in tred tool now available in the various swig generated
    language bindings (John Ellson)
  * number rounding added to SVG renderer (same as PS and TK rounding)
    to aid regression testing. (John Ellson)
  * additional regressson test framework, used in Travis CI builds. (Erwin Janssen)
  * PHP7 support (requires swig-3.0.11 or later). (John Ellson)
  * Allow user to specify clustering algorithm in gvmap. (Emden Gansner)
  * Add Sierpinski graph generator to gvgen. (Emden Gansner)
  * Extensive code cleanup (Erwin Janssen)
  * Removal of libgd source - use vanilla libgd from separate install
  * Windows builds (Erwin Janssen)
  * Appveyor CI for automated Windows build testing (Erwin Janssen)
  * Travis CI for Fedora/Centos builds (Erwin Janssen)
  * Added JSON output format, -Tjson  (Emden Gansner)
  * New curved arrowhead, cylinder node shape.
  * Resolves bugs: 2599, 1172
  * Add cylinder shape for databases.
  * Free installed plugins
  * Update makefile for dot so that the using libpanco_C in the static build include PANGOFT2
    as well as PANGOCAIRO_LIBS (needed for some versions of Ubuntu)
  * Add json output format
  * output class value in svg files
  * Add plain shape for use with HTML-like labels.
  * Add icurve arrowhead.
  * Revert to old, translate to origin semantics in neato, etc. Add flag notranslate if that is
    what the user desires.
- Run over with spec-cleaner and convert deps to pkgconfig
- Fix Group
- Remove unused pre requirements as there is no pre phase
- Inline sed changes and do not rely on pipes
- Do not add needless requires to devel pkg, there are no such stated
  dependencies in any of the .pc files provided
- Add pre_checkin.sh scriptlet to allow generating of the extras subpkg
  instead of having independent spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
</package>
<package pkgid="03f9bd0d95dcee56972909edba1225fcc91955bb850eb6ed8fa2eeb471490784" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="16300388c000e39ce865aa35be91fad5879b0d3f6f2689277c140b8e36ddf10d" name="grub2" arch="i586">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="e0c934536c5da7d67c4c3cf20698a70c4c66d8bd31afdc44f328231677c62f35" name="grub2" arch="ppc64le">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="809dac48538d0fc7dd9037e4bd58e1f22c7ae8a44cd30722636194b96e02d2a9" name="grub2" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="ca0d76a424dcaeabf7e4998731634b14a85c9a7ec1698aaca645429318cba0ba" name="grub2" arch="src">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="3d32cf68338a88c73c5578b611db9374331f024145503022d6809b1ba3587f92" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="92a424c9c76aa825a1e1e292f5cdfc5e67f0704e440a24969761d76ae5917a48" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="4b2692c550db6af1cf99b96480348e1148b789efed7637b9cb20853f7b1303dc" name="grub2-arm64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="2fbc5bbe6a78331ba6ad81b20798eaba96d1a42ed799e6c38ec53dc959a38149" name="grub2-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="b3a3779b4051047efe1539b0e284ae623d4ea67e4d7f4164cbe09050a1e85396" name="grub2-branding-upstream" arch="aarch64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="c1388aff267cd43ab51a02a2ec101bb9f16999a96a8cb2da3d3cf6fe979891f6" name="grub2-branding-upstream" arch="i586">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="2924faf108bb4b10ebd2fbf65786d93047935b0fd7c321d4f6858939acab23d1" name="grub2-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="538d518c5705e1215356164bf8adf147d8468d4e74db69a939ced49ea40382b7" name="grub2-branding-upstream" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="ce2401b94938036dfc58ef3c3f3e5ad8b9afe1ff0dbdaab4fa80a5d4412c8da6" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="7b2fbf4f3f0a7bcb3d5b5d0651c9d809f574064b8c0fce40032c02c0eb35b3cd" name="grub2-i386-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="f880541a90d679abbfda433e78e2e4d0b43ca475b98684135d23139adb13b58a" name="grub2-i386-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="dbea998273334876b8b4ebe6cdf8271e605c263cb45b538c6904d092c35fc9fd" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="70025f8f40811452714207bead9bc68cc6589bcd6bdde247e26277210743187f" name="grub2-i386-pc-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="a60425b443878b846fa8bcb60d1bab80e2efd2ae035cb6c061299a7e234c8667" name="grub2-i386-xen" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="982f494addce25f8ed2cb5e73cd9090b730bbfefc50aa35a068404f0ffa0a316" name="grub2-powerpc-ieee1275" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="4d93528e341c2504396f312e0ac6fc268c02c9a8e8b85d5a4061d084209b8851" name="grub2-powerpc-ieee1275-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="dcf44e0993093457e9b7b6643ab21eab1dd16cf2a4a332547ccea36067e59da2" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="19afdd6458e971c99ea3c07cc3e5c41f6948b81b398012e3c5284aa2a7746d14" name="grub2-s390x-emu-debug" arch="s390x">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="c3106bda6de35d437816b575d6218d1ccda4ad8cd66a9ba4b4afe8f0894f8d35" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="0cd73664db4e870bfb58bdd7db58c1c1b8369db7b4611bebbb7e401e058accb8" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="3a95120eb014e4be594730d71abf65f8fbd5856bcad94bf43923dade4f95b130" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="b3a0deeb1af725531d0c52015d617e6cec6f52e5555bd128c031399b0c82f997" name="grub2-x86_64-efi-debug" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="7a727bc5e79b89def6b62b6e48d8a0e59ed3093a07b422903fd0851ebaa462dc" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.04" rel="9.45.2"/>
  <changelog author="mchang@suse.com" date="1599652800">- Make efi hand off the default entry point of the linux command (bsc#1176134)
  * 0001-efi-linux-provide-linux-command.patch</changelog>
  <changelog author="mchang@suse.com" date="1601035200">- Improve the error handling when grub2-install fails with short mbr gap
  (bsc#1176062)
  * 0001-Warn-if-MBR-gap-is-small-and-user-uses-advanced-modu.patch
  * 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1602676800">- Fix https boot interrupted by unrecognised network address error message
  (bsc#1172952)
  * modified 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="mchang@suse.com" date="1603368000">- Fix grub2-install error with "failed to get canonical path of
  `/boot/grub2/i386-pc'." (bsc#1177957)
  * modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1604318400">- Fix boot failure in blocklist installation (bsc#1178278)
  * Modified 0002-grub-install-Avoid-incompleted-install-on-i386-pc.patch</changelog>
  <changelog author="mchang@suse.com" date="1614340800">- VUL-0: grub2,shim: implement new SBAT method (bsc#1182057)
  * 0031-util-mkimage-Remove-unused-code-to-add-BSS-section.patch
  * 0032-util-mkimage-Use-grub_host_to_target32-instead-of-gr.patch
  * 0033-util-mkimage-Always-use-grub_host_to_target32-to-ini.patch
  * 0034-util-mkimage-Unify-more-of-the-PE32-and-PE32-header-.patch
  * 0035-util-mkimage-Reorder-PE-optional-header-fields-set-u.patch
  * 0036-util-mkimage-Improve-data_size-value-calculation.patch
  * 0037-util-mkimage-Refactor-section-setup-to-use-a-helper.patch
  * 0038-util-mkimage-Add-an-option-to-import-SBAT-metadata-i.patch
  * 0039-grub-install-common-Add-sbat-option.patch
- Fix CVE-2021-20225 (bsc#1182262)
  * 0022-lib-arg-Block-repeated-short-options-that-require-an.patch
- Fix CVE-2020-27749 (bsc#1179264)
  * 0024-kern-parser-Fix-resource-leak-if-argc-0.patch
  * 0025-kern-parser-Fix-a-memory-leak.patch
  * 0026-kern-parser-Introduce-process_char-helper.patch
  * 0027-kern-parser-Introduce-terminate_arg-helper.patch
  * 0028-kern-parser-Refactor-grub_parser_split_cmdline-clean.patch
  * 0029-kern-buffer-Add-variable-sized-heap-buffer.patch
  * 0030-kern-parser-Fix-a-stack-buffer-overflow.patch
- Fix CVE-2021-20233 (bsc#1182263)
  * 0023-commands-menuentry-Fix-quoting-in-setparams_prefix.patch
- Fix CVE-2020-25647 (bsc#1177883)
  * 0021-usb-Avoid-possible-out-of-bound-accesses-caused-by-m.patch
- Fix CVE-2020-25632 (bsc#1176711)
  * 0020-dl-Only-allow-unloading-modules-that-are-not-depende.patch
- Fix CVE-2020-27779, CVE-2020-14372 (bsc#1179265) (bsc#1175970)
  * 0001-include-grub-i386-linux.h-Include-missing-grub-types.patch
  * 0002-efi-Make-shim_lock-GUID-and-protocol-type-public.patch
  * 0003-efi-Return-grub_efi_status_t-from-grub_efi_get_varia.patch
  * 0004-efi-Add-a-function-to-read-EFI-variables-with-attrib.patch
  * 0005-efi-Add-secure-boot-detection.patch
  * 0006-efi-Only-register-shim_lock-verifier-if-shim_lock-pr.patch
  * 0007-verifiers-Move-verifiers-API-to-kernel-image.patch
  * 0008-efi-Move-the-shim_lock-verifier-to-the-GRUB-core.patch
  * 0009-kern-Add-lockdown-support.patch
  * 0010-kern-lockdown-Set-a-variable-if-the-GRUB-is-locked-d.patch
  * 0011-efi-Lockdown-the-GRUB-when-the-UEFI-Secure-Boot-is-e.patch
  * 0012-efi-Use-grub_is_lockdown-instead-of-hardcoding-a-dis.patch
  * 0013-acpi-Don-t-register-the-acpi-command-when-locked-dow.patch
  * 0014-mmap-Don-t-register-cutmem-and-badram-commands-when-.patch
  * 0015-commands-Restrict-commands-that-can-load-BIOS-or-DT-.patch
  * 0016-commands-setpci-Restrict-setpci-command-when-locked-.patch
  * 0017-commands-hdparm-Restrict-hdparm-command-when-locked-.patch
  * 0018-gdb-Restrict-GDB-access-when-locked-down.patch
  * 0019-loader-xnu-Don-t-allow-loading-extension-and-package.patch
  * 0040-shim_lock-Only-skip-loading-shim_lock-verifier-with-.patch
  * 0041-squash-Add-secureboot-support-on-efi-chainloader.patch
  * 0042-squash-grub2-efi-chainload-harder.patch
  * 0043-squash-Don-t-allow-insmod-when-secure-boot-is-enable.patch
  * 0044-squash-kern-Add-lockdown-support.patch
  * 0045-squash-verifiers-Move-verifiers-API-to-kernel-image.patch
- Drop patch supersceded by the new backport
  * 0001-linuxefi-fail-kernel-validation-without-shim-protoco.patch
  * 0001-shim_lock-Disable-GRUB_VERIFY_FLAGS_DEFER_AUTH-if-se.patch
- Add SBAT metadata section to grub.efi
- Drop shim_lock module as it is part of core of grub.efi
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1615464000">- Fix chainloading windows on dual boot machine (bsc#1183073)
  * 0001-kern-efi-sb-Add-chainloaded-image-as-shim-s-verifiab.patch</changelog>
  <changelog author="okurz@suse.com" date="1617710400">- No 95_textmode for PowerPC (boo#1174166)</changelog>
  <changelog author="mchang@suse.com" date="1617883200">- Fix error grub_file_filters not found in Azure virtual machine (bsc#1182012)
  * 0001-Workaround-volatile-efi-boot-variable.patch
- Fix executable stack in grub-emu (bsc#1181696)
  * 0001-emu-fix-executable-stack-marking.patch</changelog>
  <changelog author="mchang@suse.com" date="1620129600">- Fix error shim_lock protocol not found on aarch64 (bsc#1185580)
  * 0001-Make-disable-shim-lock-work-with-lockdown-verifier.patch</changelog>
</package>
<package pkgid="b6aebad3f1fc5cdf3cf92b9b9e148b43d0a5cc121fbe4d3a69d7425b78ffc302" name="gstreamer" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="d20faa61adc80ef7a7ee21678d70e1afc285840a1858894147e401878d5ca0da" name="gstreamer" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="41ab79203d6f43515a976d08436d51b57a2b2a5a7f7a1fb6779d3a9e9d2dd740" name="gstreamer" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="2b23b8d8190bdd45a8d6ed19be534f429eb9410691a228c2b3729795460b555d" name="gstreamer" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="99b2479112486698b5d33f912b0a23f6e13c26f993b93eea7c21bd7088b92a63" name="gstreamer" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6ba4e77d427fe604c76ad6811431195090d345e79ded96e59dd6ebc7c8d96096" name="gstreamer" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="8e05f39f50266a021125ca9df98af1ebc9f1581146298862d4ac3b6c5e8af639" name="gstreamer-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="69babc3c092437779576cb00040d480ce296039617578a9e9fd9f3d833a509af" name="gstreamer-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="6364d728d86dbca271d8b3fde1d5d076f04263709f6a4a4f9614dc21b188a5cd" name="gstreamer-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c2ff90f3f53938072f5ed362b49f17972187646f9689f5cdc3656321ff08f756" name="gstreamer-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="76d274e17458b0ab46e80241599029e7cacee90cd95356a6c394b674f9bb50be" name="gstreamer-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b08ca98f9a984a35083e5ebc03c10dbf2272baff838879b4d567c0ae73cb9318" name="gstreamer-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="4b7bd468c09fbc98400ffd223fd2ef3ce2af9b14d41f19f86a96cbbc5a09bf19" name="gstreamer-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="c9b695cd2eb833a4af1e7b95661425abaa9a6a0d455a69fb08c9af86e11dfe69" name="gstreamer-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3692a53fd89951f367f29411e30357ed161998e9ec629567280c62b84efe877b" name="gstreamer-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0c8400638fdfd415f4d80135ff2bdab1a3e190668bd9425f60a1a87c890f9e2a" name="gstreamer-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="45eb50e8946f1d33d32ddf82bfba6b4fbbd34aa2e16aa992ec1626365f8e05dd" name="gstreamer-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="29d84a3cb9cbb9c78e805766e2a31e46f3cee4aa5f66e03bac2812884eee4298" name="gstreamer-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="d17cb5d1f6422ac039b425c5b7e4945a53486a667468b8febe49daec21efa641" name="gstreamer-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3496749921d2d5ff5ac518e2b12fe8c0eed3090dc345386c6517e908a4b95c1a" name="gstreamer-plugins-bad" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c924b626da34b9f29b0703566fd458c2d8777a432ff051e6d2190de7896cc9fb" name="gstreamer-plugins-bad" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="66ed9371d80e65a74b641533982c111fe09f3f9299f69053242a9e64c21d914e" name="gstreamer-plugins-bad" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="784cd2dffbaeb4d29339d6716b74aaf266cccd0957f74454c35c22f6e16e0764" name="gstreamer-plugins-bad" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="81e875d47a5ea42b2b93aa14b0b2bc0a25743048e0d147ac6cbbedfc2ad42f8a" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c450557fd21358f944d4883a3a6afdc2e0dbd0d68414a0c4d57df6f23a2f6e17" name="gstreamer-plugins-bad" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="97feec3df0ef9d1d6a007cb6854743980bdbcdf8eef303a65e2e5bb7e7af678c" name="gstreamer-plugins-bad" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="321cac67188caad214d690a173afc9fd93acb1ce84434396f66db816a4820c29" name="gstreamer-plugins-bad" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1c26d87cc483b5daaddf4bd6734c94aa56436b30877eaaeeb7d5d6c7efdd9b01" name="gstreamer-plugins-bad" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8e04a83d1a15019aea8404602383ce0bd04223623d55e3e68c7f89ce2870d4fd" name="gstreamer-plugins-bad" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="83baba55fbcf1583cddbf4d636309a0741b2d4cc609e4bd257f782733b732c68" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="255890c0c3709382a2363dada77136c30fbac0cdc3de4832fa28deed12466e68" name="gstreamer-plugins-bad" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4cf845e48754989e2536ebe69a5af030c7acf21138f1c7966b793351bf5bbd69" name="gstreamer-plugins-bad" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ee58ae09a4bc3ce8631c001b784af28ea814295c3c7952ea965683b53eda908d" name="gstreamer-plugins-bad" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="e9d3f11c85594da1b939ffd95b0059c2bfc2728ea5862edf6362010c7855a3d5" name="gstreamer-plugins-bad" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="d3ef602c6e79db1ed459cf57483f97553a4c01811dce9c9b7a2e6fc11c693f06" name="gstreamer-plugins-bad" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="c3b2a304ecefe02136f880285d0f6e6d9edc75cb2c4420c51150377ec5d774f5" name="gstreamer-plugins-bad" arch="src">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="aca7953238c15ea35e8ec239ecf96ea368132c248f6d05b8cc4fe4c95bfbce2a" name="gstreamer-plugins-bad" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="db5ddaaaa422ad4ca876d2d30f1a7fee2e1665e0b5dc56cc77a9f7049f1fe621" name="gstreamer-plugins-bad-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="9199dd85bb2cc12ea70700d27620c0514b75b17dec1dec0ef036efcd686dde68" name="gstreamer-plugins-bad-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="26bf04c1ba6af5f4ee330c2a4bd6dfe4a7f7fee3b53205ba300c05b98ab9aa12" name="gstreamer-plugins-bad-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="4a8dee5926c253ef9f53d1aba77081401df5197a7d3f88f7d8aaefc9fa41f0b6" name="gstreamer-plugins-bad-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c441ddd1450cb5f18489ac6db894ae70979c92021df31f090b0325d5f8798641" name="gstreamer-plugins-bad-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="500b5741ef6ab0f4905bfcaa44c6a4a3b878a3dcee79e04ec81c2679a4e385fe" name="gstreamer-plugins-bad-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="2b4a3c13459baa45a88bfe1f33668dc00a6b8f0e0a53f6996167e7b13d42d7e5" name="gstreamer-plugins-bad-chromaprint" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="97da191ccd7ed3b352d3d7b73ed280bf2f8527f174a8f768e135855a07d6b8c8" name="gstreamer-plugins-bad-chromaprint" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b928d95394bd6ceb2bc06a6ff11f641bc0be189a3888d2e994dfc248a50943fa" name="gstreamer-plugins-bad-chromaprint" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b6a26dae0b75f6dfb658eacb39ccda90d13af0e54703e801dad555751d9d9f25" name="gstreamer-plugins-bad-chromaprint" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38bf9d1e64c0e875ffd6521ba2527191586a3f3fcb579eb5e1a680efd44ae978" name="gstreamer-plugins-bad-chromaprint" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="dd7dd4ba88a6122ba3f60c3f7fe1b22a0dbee6e3597d05ebf56e68cc6b9c652f" name="gstreamer-plugins-bad-chromaprint" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="74bfc11c6ab4f80996e7a2b71d8e2e631f8a2fe4ff4d5ee197464e88c1b580aa" name="gstreamer-plugins-bad-chromaprint" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="876e9cd360e84aa7a6893e95ee9a19dfb90e4e5acbd1f28f35041290a07a6487" name="gstreamer-plugins-bad-chromaprint" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="22aeaab9c5ed082f54684ccfc8e6c16e1a840adaa304e23e053c62c67175b14c" name="gstreamer-plugins-bad-chromaprint" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b417d09f405946f92770f9334b6a0ad5b3381b71d7fb963f61f885bc0408eed7" name="gstreamer-plugins-bad-chromaprint" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="95b6338af3b422ec4359c0f6f3c04336ed14c3cd5f51fbd740b984c6c98b6a40" name="gstreamer-plugins-bad-chromaprint-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e33011f302e6e327d8b63ff55a0859b10d2588ca88f725d30a6cee9f19b0ea3b" name="gstreamer-plugins-bad-chromaprint-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="715e336a93fe522c2ec70be94277c5f5a729b729750b9afc9438a922e01a766c" name="gstreamer-plugins-bad-chromaprint-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="380657280946388c555561f51800cde244f57799f726ba2d27fcc365d45e8eb0" name="gstreamer-plugins-bad-chromaprint-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="30f45e09177a536f0805bfbfaf3e2f77baf967fd9b304b8ecfda29cf7297528d" name="gstreamer-plugins-bad-devel" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="92590581d80013df2c3328de974dccc9146d988adb205bb82f4b21d8ae6ab3a2" name="gstreamer-plugins-bad-devel" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="8be4e1241e4dcf85f415b2ca464218e8df7312fb03ce453fc1ec07fd64104d1e" name="gstreamer-plugins-bad-devel" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="bd31c82f234e16d6ece33c802962f0aa70de1b05bb546a5669d653e07046debb" name="gstreamer-plugins-bad-devel" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f6c05263b5d4ba09875d9b438cba65f8462d9bef523f106cfd91b9ce5e78c646" name="gstreamer-plugins-bad-devel" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="b19642e34b27d9c1898137944afeadbc1819d8cc44538ff24e951f77509299f9" name="gstreamer-plugins-bad-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cf5924df0084f1d63981a0932ef8f675675bbd7b186c38237d677aba4aa9e048" name="gstreamer-plugins-bad-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="848d478f3dbb6c92ddc63972e675ac11c8e24649666dac21bea1827d17f44d87" name="gstreamer-plugins-bad-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="eadd5ba25012fe33bb5e8fc25b6322a16e0b29d29022875ef863bb1f3a425169" name="gstreamer-plugins-bad-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="63a7986c3a3a772a55b8c86169314b9f876381540d6b2ad83c00aa760178cc7f" name="gstreamer-plugins-bad-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="09b9370d368d9cfab5dd68b9ef6c3c264c693070ca66bf430635bada51d4ce57" name="gstreamer-plugins-bad-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="6a8aa596e6ebd2b3bc6dc71c4eff65eb2f6429414d54eda7b2ba4d45ad0cf04d" name="gstreamer-plugins-bad-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="17e8f6c5ba2cd82a4feab3a9f971c653637a4f90816050e2c88bd21df8f93a15" name="gstreamer-plugins-bad-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="88a3e9d77560353b079e76481679e8109112f5b3706504bbedce4f5b58c00308" name="gstreamer-plugins-bad-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="09b56d009c78c71eb45e2bb3fc718444396890babb06acd225146c573af9df27" name="gstreamer-plugins-bad-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="2a44638c51512eb9145a63294d91b990cc93b55cb9d665263887f6c8e65c7713" name="gstreamer-plugins-bad-doc" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="6e072873c4044ff2a1874895e60b95deedd70027668e34e59598a9ed7e506df5" name="gstreamer-plugins-bad-doc" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="0b17088580f9a34713dc9f41660e5c125116219af0caac762bff93c61b26d075" name="gstreamer-plugins-bad-doc" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="5bdb3bc1d657e7463ebdbc783f2bcd1714eb810853031a7a01b36f3d068756fe" name="gstreamer-plugins-bad-doc" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ed5e4bee1f7910fc3bbda59bbbde1abab68a869e56fa8538d452cdce5c3d7a28" name="gstreamer-plugins-bad-doc" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="6a03d46deb543417f6d33ebdc32844252b0d07ef45d4dbfb0475c86905b38a7e" name="gstreamer-plugins-bad-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="642f29693e22c7decaff1fb82e6a78b7446995f818067f3b6d4e32e2c6e2ccf5" name="gstreamer-plugins-bad-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="80158c13bbad17d68ea00f8c8994afa214c74643e47178d63128d1f0116f5da1" name="gstreamer-plugins-bad-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="911be2c399819a391e7704e4483a835090bab6093725f8461bbbb4272a947866" name="gstreamer-plugins-bad-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="49fa921c006ada8b4cebc5d1a6a2f0402d4daa4cb5e0c924c345d05e7ce10466" name="gstreamer-plugins-bad-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cc63cfd06f1291903ff50851ff68a044b7d6c61144cebbf7cd572a7c5348eff9" name="gstreamer-plugins-bad-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b2c5049a7399fa17f07f278d581716c3d3153813a2d9439f0099bcf4f14a7148" name="gstreamer-plugins-bad-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="24c48d219c81b46a72bd0f14dbc0cf812ca26f4b757b1b757bbed5a41e5069f4" name="gstreamer-plugins-bad-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="3e8fe4c7db201519118ede9365c02154aa33361c69f5effcf551fab26fed2f34" name="gstreamer-plugins-bad-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="d9ce41f6b7d154921ee36d15d10cae16cc8397b6ee0ed23e20794c532a8473a5" name="gstreamer-plugins-bad-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ee8e4a35ed3ab93e6768cfce49d01da295aeca0cc0ff059c364ed8dbdc14609e" name="gstreamer-plugins-bad-lang" arch="noarch">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="966283b141245f46a16e2a22b16f87b79c438ec2062fe4eb8ef6c102d0b234b8" name="gstreamer-plugins-bad-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b5c2b4f1789f26402b509cb9dbd8d192f77eb9d9358dc0f519d124d2a0f21ce7" name="gstreamer-plugins-bad-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="4f2a519a675e4a003a16bfecabe422a918f15d3ddc2fb188c69f041547b710f3" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="881f821973405db84a5cd5e85af391a889cd10b66a69381895cca4bf30edbe70" name="gstreamer-plugins-base" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="410d358476850d4f65d048ff14b5466cdf92e3603bd1b65299fb0ce6c4348bba" name="gstreamer-plugins-base" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="05eef511208ee03753e6624ad5a61c4db5fae79bc35d35626cb09a337ffae8ce" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="26930b76a73f3ab1315e533a61b4ed4786322146208563b1d4a5c1ed21102be6" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0800d29a3b2ecc86e81bb7f76ef7554aa3067d108750b413a98ac7a3d13ce205" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fcfd1dc2cda5a5a595354f7ddb30ec667c0fc3aa7b4e8c631682b3658bf2d97b" name="gstreamer-plugins-base-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="00b2567ecb3407ec8c3cd18af6c36b1702e9f886789c79c1e39870002e5a87c7" name="gstreamer-plugins-base-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f8e7e582196edcb5b088a828dc1a71370996ca56e01597c47545b2d3483fc3" name="gstreamer-plugins-base-devel" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d1ff76639bb72ef4c259105a44f592ce8bd6ea62a84fc09ba62a4e6351114bb3" name="gstreamer-plugins-base-devel" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96355a57722ef06a753b961cc4fcd330e5c6f7d14e43f874507a79a01ae970a9" name="gstreamer-plugins-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2b5fb452b429387be6597c6cce7ad979e7aa4706bda50f1699652525bf92e4ff" name="gstreamer-plugins-base-devel" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6df6bed602867dfd0afb090e879a874438320505e06ee5014e3ff08b3ef50ac5" name="gstreamer-plugins-base-devel" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="344b0730e2338b4889ec745ca7e5ac839717bb1349af8fb33e0732d9050edadb" name="gstreamer-plugins-base-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="e36168dbe8ac194e38981559296bee5f9037b905781aafaffb72ee95909fc382" name="gstreamer-plugins-base-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1dcae63c6954f3b00ce1cfbd57cd6506aedbf8ae1fbf95d60e279d0a0f89de32" name="gstreamer-plugins-base-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="122fcf958b31d4dc4a92ed9597117a4637bd7f939534466cac12d304021de1a0" name="gstreamer-plugins-base-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="33631841d3ed6cc26f7d88efc418e9c59ca863b5f92ddb3c0046475d91b762f1" name="gstreamer-plugins-base-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="1ff4f22d68a711b1a699c1f76efc9e03ca903edffaf7034f94f489a9ef5c150b" name="gstreamer-plugins-base-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="dd2022bead07345f456d93c95a50a8896565f8ded1585cbd05705afe1d841d12" name="gstreamer-plugins-base-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4ca7ea5b0bfa4306d34c1f6fc4c3e4c377a156fba12bd1975f26078c68f22d77" name="gstreamer-plugins-base-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c1f02b53c20a48258147c8b588be00efba2d63b52dc7e648dba88f1bb848efa8" name="gstreamer-plugins-good" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="42d724a61adec6d1c76de78e90f7b7336f54b7b7454af8baff70ef0e0aa8a349" name="gstreamer-plugins-good" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5dae0aaf366d6c7049924f3051e306a5e18228817e7e06e9c8ebd6e8d40ea11e" name="gstreamer-plugins-good" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="712fa7dcc01606c7657a7c8fdf8e1999321ee2fef34a817718d6d30c5c971b33" name="gstreamer-plugins-good" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="cb6be0205486e548435301682f085a9564a6681b6adb441374bffcd3b1f4f986" name="gstreamer-plugins-good" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="661efd46f785ae9830cd834298d40c96f857d2f9ab467e16680c2ec367e5bd88" name="gstreamer-plugins-good" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="072211ac5c76890bef1cd61397af8da07a200deb5add8f3de8eb4090006b007f" name="gstreamer-plugins-good-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="fe42f50739079c06f54bde68ee9e1c0f0442d024f4ae26a5bfd5848666c933f3" name="gstreamer-plugins-good-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="86c478db4dd65753c2e1942f40aa3ae7693159c35b35e52fcd97dd6fd8ac3b54" name="gstreamer-plugins-good-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="ecb601830eb06c8578b54f5ea4255288a2d1071d1e41deb09e398e83c8b9bfc8" name="gstreamer-plugins-good-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="1b28501a43b86ef7910be3ba5f2b41d8f755e2d9b7b732d057e6797c6fb6969e" name="gstreamer-plugins-good-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="401658ea78601504f12feda0d4a3d328dbc583aae2d3e5d847721a0e248ccaee" name="gstreamer-plugins-good-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="7b21369b41e8fa998b6a69c90904e6e718a406783240b26a7c7b5999ff0a758e" name="gstreamer-plugins-good-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2124f1a531b408208e3336192cb9aac294d4ee635a94a1b8d8c91fa9294905a0" name="gstreamer-plugins-good-extra" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="09d433018bef7ff6b19bc1df7c64c1907296df99697560dad0153c7479c64515" name="gstreamer-plugins-good-extra" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9dfe04810cf17c9fdaa7b37d18b0a44db5de730fa33b98a1c4a5989559846a96" name="gstreamer-plugins-good-extra" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="598bd2d61b83c327fbfbd69d8275e51f90c1ade03130d896fced12bfcfe57089" name="gstreamer-plugins-good-extra" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="f670288e20c41d27cde523588f745a18c501d4ba06eeb681ada65b2012c3f197" name="gstreamer-plugins-good-extra" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9845ac6aca3ee9948e27917c145ba0c151cdb864f05d4feaddb3ffa72871e2a7" name="gstreamer-plugins-good-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="3665095b02f62e6301788939d078885b97bffd33dcd8ca111bbe576dd1385f5e" name="gstreamer-plugins-good-extra-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e6ceb9340118ce3a0cd3a8844f80c04184bb999fa0f7caecf69ff581d749c405" name="gstreamer-plugins-good-gtk" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="7915e6ec504354554f8910c836f21ec97ce82ca40ace37ac10fbe85c727eaceb" name="gstreamer-plugins-good-gtk" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="2612670f6c11b8bcc5f110f38e79798c2812a89eb22841fcf9554d26917738ba" name="gstreamer-plugins-good-gtk" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="e37b842716d0ae047c8384b1b692d01f8a78e6289d6d2afea095a84b56b4e6e9" name="gstreamer-plugins-good-gtk" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="ab55c206afbd0018aa1993c823a3aac6884654f81497a143fedf2997b2f37f88" name="gstreamer-plugins-good-gtk" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="c67df775ce008a83cc0ba9b0e2fc00d9f9aa2f150ec413d39c6677cebb8d3806" name="gstreamer-plugins-good-jack" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="88cb40b5f0069beefd3831d1a66c7fd70e5228b6ab90e7b53a7320cfe994b1e1" name="gstreamer-plugins-good-jack" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="dbe2a88d062103eb929994349eff12f02588c30a92d97f2e42ea4283f82a2cd4" name="gstreamer-plugins-good-jack" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="14e6efef7306fb83ae34686192b5b912f2df1357f1c7e2fc9bf6a297b28500ce" name="gstreamer-plugins-good-jack" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="84c72ce662a7d14828e1a956431f83fd4575ebe5fb296b8d22a988ddc9404646" name="gstreamer-plugins-good-jack" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="9420d6af5c32283b81ee5703a0267d3655551845de6c9adf606643368141b5f6" name="gstreamer-plugins-good-jack-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="36f1fc595bcf4611c105b24aeb12c022cab895caaf813a55d864778b7e9615d2" name="gstreamer-plugins-good-jack-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="b2176fd78b860798f1ba465f0a9cfcf95aee3d83398b3dbdb90547c854cf0ce3" name="gstreamer-plugins-good-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="5c1594283fa12e218d8660c5ea279c965910ce6f30ec7a38a79c539623ca1fbc" name="gstreamer-plugins-good-qtqml" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="48f04e1a3c2009b3395d7e06a46e80a7651ed9bca21656f28f3a7963cc461338" name="gstreamer-plugins-good-qtqml" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="42242b243c92701e25c345b17d8a66e660212773a8a630a2c879d8d72f241fdd" name="gstreamer-plugins-good-qtqml" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="07e9bb80391a2644c60eccfea6e6d9006af4a91a6d92d8709d883d26b4274d35" name="gstreamer-plugins-good-qtqml" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="081d1d1c6db5890b9a9e8e1b92905c50b8519f4f76b06f4f4d7edb8094fbca1a" name="gstreamer-plugins-good-qtqml" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.
- Update Source url to new home.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549368000">- Add gstreamer-plugins-good-fix-vpx-build.patch: Fix build with
  libvpx 1.8.0.
- Add libtool BuildRequires and pass autogen.sh, as the above patch
  touches the buildsystem.</changelog>
  <changelog author="olaf@aepfle.de" date="1552046400">- Require automake &gt;= 1.14</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + flv: Use 8kHz sample rate for alaw/mulaw audio.
  + flvdemux: Do not error out if the first added and chained pad
    is not linked.
  + flvmux: try harder to make sure timestamps are always
    increasing.
  + gdkpixbufdec: output a TIME segment which is what?s expected
    for raw video.
  + matroskademux: fix handling of MS ACM audio.
  + matroska: fix handling of FlagInterlaced.
  + pulsesink: Deal with not being able to convert a format to
    caps.
  + rtph265depay, rtph264depay; aggregation packet marker handling
    fixes.
  + rtpmp4gdepay: detect broken senders who send AAC with ADTS
    frames.
  + rtprawdepay: keep buffer pool around when flushing/seeking.
  + rtpssrcdemux: Forward serialized events to all pads.
  + qmlglsink: Handle OPENGL header guard changes.
  + qtdemux: fix track language code parsing; ignore corrupted CTTS
    box.
  + qtmux: Correctly set tkhd width/height to the display size.
  + splitmuxsink:
  - Various timecode meta handling fixes.
  - Make work with audio-only encoders as muxers, e.g. wavenc
  + v4l2sink: fix pool-less allocation query handling.
  + v4l2dec/enc: fix use after free when handling events.
  + vpx: Fix build against libvpx 1.8.
  + webmmux: allow resolutions above 4096.
- Drop gstreamer-plugins-good-fix-vpx-build.patch: Fixed upstream.
- Drop automake and libtool BuildRequires and autogen.sh call: No
  longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation is
  currently not being built.</changelog>
  <changelog author="fvogt@suse.com" date="1562155200">- Add missing pkgconfig(Qt5X11Extras) BuildRequires: Needed to
  build Qt X11 integration.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1566734400">- Add gstreamer-plugins-good-fix-glibc-incompat.patch: v4l2: Fix
  type compatibility issue with glibc 2.30.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop gstreamer-plugins-good-fix-glibc-incompat.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + vp9dec: Fix broken 4:4:4 8bits decoding
  + rtpsession: add locking for clear-pt-map
  + rtpL16depay: don't crash if data is not modulo channels*width
  + wavparse:
  - Fix push mode ignoring audio with a size smaller than segment
    buffer
  - Fix push mode ignoring last audio payload chunk
  + aacparse: fix wrong offset of the channel number in adts header
  + jpegdec:
  - Fix incorrect logic in EOI tag detection
  - Don't overwrite the last valid line
  + videocrop: Also update the coordinate when in-place
  + vpx: Error out if enabled and no features found
  + v4l2videodec: ensure pool exists before orphaning it
  + v4l2videoenc: fix type conversion errors
  + v4l2bufferpool: Queue number of allocated buffers to capture
  + v4l2object:
  - Fix mpegversion number typo
  - Work around bad TRY_FMT colorimetry implementations</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - deinterlace: on-the-fly renegotiation
  - flacenc: Pass audio info from set_format() to query_total_samples() explicitly
  - flacparse: fix broken reordering of flac metadata
  - jack: Use jack_free(3) to release ports
  - jpegdec: check buffer size before dereferencing
  - pulse: fix discovery of newly added devices
  - qtdemux fuzzing fixes
  - qtdemux: Add 'mp3 ' fourcc that VLC seems to produce now
  - qtdemux: Specify REDIRECT information in error message
  - rtpbin: fix shutdown crash in rtpbin
  - rtpsession: rename RTCP thread
  - rtpvp8pay, rtpvp9pay: fix caps leak in set_caps()
  - rtpjpegdepay: outputs framed jpeg
  - rtpjitterbuffer: Properly free internal packets queue in finalize()
  - rtspsrc: Don't return TRUE for unhandled query
  - rtspsrc: Avoid stack overflow recursing waiting for response
  - rtspsrc: Use the correct type for storing the max-rtcp-rtp-time-diff property
  - rtspsrc: Error out when failling to receive message response
  - rtspsrc: Fix for segmentation fault when handling set/get_parameter requests
  - speex: Fix crash on Windows caused by cross-CRT issue
  - speexdec: Crash when stopping the pipeline
  - splitmuxsrc: Properly stop the loop if no part reader is present
  - use gst_element_class_set_metadata when passing dynamic strings
  - v4l2videodec: Increase internal bitstream pool size
  - v4l2: fix crash when handling unsupported video format
  - videocrop: allow properties to be animated by GstController
  - videomixer: Don't leak peer caps
  - vp8enc/vp8enc: set 1 for the default value of VP8E_SET_STATIC_THRESHOLD
  - wavenc: Fix writing of the channel mask with &gt;2 channels</changelog>
</package>
<package pkgid="d968df0ee4a122a695a8c34dd03bebce77564f41dbc8745185d89eea0ea06007" name="gstreamer-plugins-ugly" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5b2c3c3d25e9cef4dec488b9fe93e25958707837551bef6cbb4b17ffe68106f1" name="gstreamer-plugins-ugly" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="5e9a46c5878cb525f5cf42788660119d2db1b6ee694f9cf24b2929af1b14b69f" name="gstreamer-plugins-ugly" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="36cfa3cb6adafbb2f8a25fae8c2519cd30de1a512e28c130aebbe829d8a4e600" name="gstreamer-plugins-ugly" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="92c0648f6f2211293e5a90f346e760db5e57330a9b7c7a5a99f60d290239de89" name="gstreamer-plugins-ugly" arch="src">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="acd8359b396084bbd693b1a14318cbc222b110803b24a94462700bb7330ce3fd" name="gstreamer-plugins-ugly" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="db3f1680cdd6ec3dd1a24a5b6836d0f1d6ec3afd86710328ddf1b72da3b95bd2" name="gstreamer-plugins-ugly-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="41e7e065964c87a9eb2365c8f4a5bd222ea526430a19893b205ae5e22826c955" name="gstreamer-plugins-ugly-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="289145b47ab4efe1b645b0308644cdf7c5d86f870611c2e623bec58bd35b9a5e" name="gstreamer-plugins-ugly-doc" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="bf02a89f6e6822d7c3a4737dfbd2b8358d7523e6d0a6152d51182abfa79075e9" name="gstreamer-plugins-ugly-doc" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="a2bdb4887a098cae926dc17739b1183f6098968c8778927bb12ff89b16c900aa" name="gstreamer-plugins-ugly-doc" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="c53c35f5c78d55363db2e782879f0f3d25ed3ae568e8a132fa446708d462e686" name="gstreamer-plugins-ugly-doc" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="71c82b802b269f6b2501f126a6520384f8619878e802e93e69d292f52aef1539" name="gstreamer-plugins-ugly-doc" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="42eef47a442a93b3bdc91dce919c414b8cf9ff7b6c8e9dc670869a4a80fc1c8a" name="gstreamer-plugins-ugly-lang" arch="noarch">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523880000">- Update to version 1.14.0:
  + Highlights:
  - WebRTC support: real-time audio/video streaming to and from
    web browsers;
  - Experimental support for the next-gen royalty-free AV1 video
    codec
  - Video4Linux: encoding support, stable element names and
    faster device probing;
  - Support for the Secure Reliable Transport (SRT) video
    streaming protocol;
  - RTP Forward Error Correction (FEC) support (ULPFEC);
  - RTSP 2.0 support in rtspsrc and gst-rtsp-server;
  - ONVIF audio backchannel support in gst-rtsp-server and
    rtspsrc;
  - playbin3 gapless playback and pre-buffering support;
  - Tee, our stream splitter/duplication element, now does
    allocation query aggregation which is important for efficient
    data handling and zero-copy;
  - QuickTime muxer has a new prefill recording mode that allows
    file import in Adobe Premiere and FinalCut Pro while the file
    is still being written;
  - rtpjitterbuffer fast-start mode and timestamp offset
    adjustment smoothing;
  - souphttpsrc connection sharing, which allows for connection
    reuse, cookie sharing, etc;
  - nvdec: new plugin for hardware-accelerated video decoding
    using the NVIDIA NVDEC API;
  - Adaptive DASH trick play support;
  - ipcpipeline: new plugin that allows splitting a pipeline
    across multiple processes;
  - Major gobject-introspection annotation improvements for large
    parts of the library API;
  - GStreamer C# bindings have been revived and seen many updates
    and fixes;
  - The externally maintained GStreamer Rust bindings had many
    usability improvements and cover most of the API now.
    Coinciding with the 1.14 release, a new release with the 1.14
    API additions is happening.
  + Updated translations.
- Drop libmp3lame-devel, pkgconfig(libmpg123) and
  pkgconfig(twolame) BuildRequires, moved to gst-plugins-good, so
  no longer needed nor used here.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526817600">- Update to version 1.14.1:
  + GstPad: Fix race condition causing the same probe to be called
    multiple times
  + Fix occasional deadlocks on windows when outputting debug
    logging
  + Fix debug levels being applied in the wrong order
  + GIR annotation fixes for bindings
  + audiomixer, audioaggregator: fix some negotiation issues
  + gst-play-1.0: fix leaving stdin in non-blocking mode after exit
  + flvmux: wait for caps on all input pads before writing header
    even if source is live
  + flvmux: don't wake up the muxer unless there is data, fixes
    busy looping if there's no input data
  + flvmux: fix major leak of input buffers
  + rtspsrc, rtsp-server: revert to RTSP RFC handling of
    sendonly/recvonly attributes
  + rtpvrawpay: fix payloading with very large mtu sizes where
    everything fits into a single RTP packet
  + v4l2: Fix hard-coded enabled v4l2 probe on Linux/ARM
  + v4l2: Disable DMABuf for emulated formats when using libv4l2
  + v4l2: Always set colorimetry in S_FMT
  + asfdemux: Set stream-format field for H264 streams and handle
    H.264 in bytestream format
  + x265enc: Fix tagging of keyframes on output buffers
  + ladspa: Fix critical during plugin load on Windows
  + decklink: Fix COM initialisation on Windows
  + h264parse: fix re-use across pipeline stop/restart
  + mpegtsmux: fix force-keyframe event handling and PCR/PMT
    changes that would confuse some players with generated HLS
    streams
  + adaptivedemux: Support period change in live playlist
  + rfbsrc: Fix support for applevncserver and support NULL pool in
    decide_allocation
  + jpegparse: Fix APP1 marker segment parsing
  + h265parse: Make caps writable before modifying them, fixes
    criticals
  + fakevideosink: request an extra buffer if enable-last-sample is
    enabled
  + wasapisrc: Don't provide a clock based on WASAPI's clock
  + wasapi: Only use audioclient3 when low-latency, as it might
    otherwise glitch with slow CPUs or VMs
  + wasapi: Don't derive device period from latency time, should
    make it more robust against glitches
  + audiolatency: Fix wave detection in buffers and avoid bogus pts
    values while starting
  + msdk: fix plugin load on implementations with only HW support
  + msdk: dec: set framerate to the driver only if provided, not in
    0/1 case
  + msdk: Don't set extended coding options for JPEG encode
  + rtponviftimestamp: fix state change function init/reset causing
    races/crashes on shutdown
  + decklink: fix initialization failure in windows binary
  + ladspa: Fix critical warnings during plugin load on Windows and
    fix dependencies in meson build
  + gl: fix cross-compilation error with viv-fb
  + qmlglsink: make work with eglfs_kms
  + rtspclientsink: Don't deadlock in preroll on early close
  + rtspclientsink: Fix client ports for the RTCP backchannel
  + rtsp-server: Fix session timeout when streaming data to client
    over TCP
  + vaapiencode: h264: find best profile in those available, fixing
    negotiation errors
  + vaapi: remove custom GstGL context handling, use GstGL instead.
    Fixes GL Context sharing with WebkitGtk on wayland
  + gst-editing-services: various fixes
  + gst-python: bump pygobject req to 3.8;
    fix GstPad.set_query_function(); dist autogen.sh and
    configure.ac in tarball
  + g-i: pick up GstVideo-1.0.gir from local build directory in
    GstGL build
  + g-i: update constant values for bindings
  + avoid duplicate symbols in plugins across modules in static
    builds
  + ... and many, many more!</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532347200">- Update to version 1.14.2:
  + Update docs.
  + asfdemux: Remove 0.10 code.
  + asfdemux: Only send flush event on seeking flushes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538568000">- Update to version 1.14.4:
  + Bugfix release, please see .changes in gstreamer main package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + sid: Fix cross-compilation by using AC_TRY_LINK instead of
    AC_TRY_RUN.
  + x264: Only enable dynamic loading code for x264 before v253.</changelog>
  <changelog author="mgorse@suse.com" date="1560859200">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support, as
    well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin (msdk):
    dmabuf import/export for zero-copy integration with other
    components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element that
    allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Add meson support, but disable because plugin documentation
  currently isn't built.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Update docs.</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  + x264enc: corrected em_data value in CEA-708 CC SEI message</changelog>
</package>
<package pkgid="d83832e4fb0b142458192ba8af05168324cbd3535eeb11612a48be8c5a633422" name="gstreamer-utils" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="a59101867cbdd83fa8d67a6fdf5a2e8422c6d0be1da1574473e50c8c2f38e5ca" name="gstreamer-utils" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="3816ee8312a45b036588cb5429c74bc794c7929337ffe18c4d9291efe1645d1e" name="gstreamer-utils" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="421cd1805e368c3d31f697a85d0538a2c9e1a91834af8f4d8c584aad702f1733" name="gstreamer-utils" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="0583ebda8ca94118d975bdbefebf1028b88d6fc79b5903d83e8168e3cfa352c9" name="gstreamer-utils" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="309476c79f410647485673f451a2a347e8188511cfea1405f4df5523d6f989ec" name="gzip" arch="aarch64">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="7ae5d2b28a23b5a237cced32cbdb7d8d9a1b148bbc8015ebc034f57438135949" name="gzip" arch="i586">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="e73f750fa510ce7f6f828484a9f8331715403c27b9e376ff833970961a163dbd" name="gzip" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="eae0a1dad7cc9de5314dc7e4ff2d563e98ccad44cc6194aa7cb8c9ac8904750e" name="gzip" arch="s390x">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="64be01845c2944bcafe4ce62ef68ca299da788c9e41fc7f614092c38df890d95" name="gzip" arch="src">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="3982e1ed00a10a3aa7d0ee02a7bbf8c075cf831f7f2049a6336d8f48c1a52077" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.10" rel="7.1"/>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
</package>
<package pkgid="4d6118a085ed45863182fe9ac112a22d980f62879c993c986743375f7d7837e9" name="hivex" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="bc6ebe8da61c97c551f876fa558de158202cf58647d9b0faedac8e430211762a" name="hivex" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="880aea5886b5965879be0af465e54cfd23cb1bab301de9be79cd1a904b3544dd" name="hivex" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="d0d57b56e25639426c6f0fc78831b3ca68deb90aad828e86727f5f248b51574b" name="hivex" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="71e30f35dfffa585759533ad3cc14aac1923a19e28da08bdb668e554ab19832d" name="hivex" arch="src">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="9643fd5776a36171eb468630b037c3c0c8110b21a9f4ae8b6c1ff3af912930d4" name="hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="bbec3f45eb8b62cf5c9821d71783d78640ba4d008e08c9cb74a53cee48f5009e" name="hivex-devel" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="e3fd405544563361f060fd55b3087c503471651bb062334f26c3026108962617" name="hivex-devel" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6c8d3a48d6a7e0b2451e6d00884e91c00d6294eba35a76b170bb453e1dfb0be1" name="hivex-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="0816152d4782aa0a802a71166410428ce44b4096852693fbada22506da5d1563" name="hivex-devel" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="7fe0a8ab797a603d5d73e45ffa743c82b0b55191f347aa85a603be1ad6313c3c" name="hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="9d8941b7031992fdf776077f2014e08e160fccfa2100db86eb6c06f722b8bb3b" name="hivex-lang" arch="noarch">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="c74de04a0ba87f5cc08d8b7f64c46c5eafb61c663db47987f3e18b6bf83a8658" name="hostinfo" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="20.4.2"/>
  <changelog author="jason.record@suse.com" date="1518004800">- Consolidated rpm reads</changelog>
  <changelog author="jason.record@suse.com" date="1518091200">- Integrated hostinfo with issue-generator (bsc#1080153)</changelog>
  <changelog author="jason.record@suse.com" date="1518436800">- Updated hostinfo(8) man page
- Distribution information first comes from baseproduct
- Added CPU Load</changelog>
  <changelog author="jason.record@suse.com" date="1519214400">- Start hostinfo.timer at install
- Added ssh key fingerprints
- Added hostinfo.timer</changelog>
  <changelog author="jason.record@suse.com" date="1519992000">- Added cleanUp to catch all exits
- Added pre-existing run check
- Updated hostinfo.timer
- Added custom action</changelog>
  <changelog author="jason.record@suse.com" date="1520510400">- Added deConfigure for uninstall procedure
- Removed spec start and cleanup references</changelog>
  <changelog author="jason.record@suse.com" date="1520510401">- Added rchostinfo link
- Removed preset in favor of system presets</changelog>
  <changelog author="jason.record@suse.com" date="1520683200">- Added 91-hostinfo.rules for network rules
- Add INCLUDE_MOTD for message of the day</changelog>
  <changelog author="jason.record@suse.com" date="1606132800">- Additions to version 1.0.6
  + Only include hostinfo details in /etc/motd (bsc#1170092)
  + Fixed CPU load average calculation (bsc#1170094)
  + Added program and version to output
  + Consolidated memory output
  + Understands 3rd party packages on SLES or OpenSUSE (bsc#1170858)</changelog>
  <changelog author="jason.record@gmail.com" date="1616068800">- Host information now persistent across reboots (bsc#1183732)
- Fixed output strings</changelog>
</package>
<package pkgid="547927689bf35f912ce7a85863bb42b1b5db17fa381552b6bf0ebda25d43fcd6" name="hostinfo" arch="src">
  <version epoch="0" ver="1.0.6" rel="20.4.2"/>
  <changelog author="jason.record@suse.com" date="1518004800">- Consolidated rpm reads</changelog>
  <changelog author="jason.record@suse.com" date="1518091200">- Integrated hostinfo with issue-generator (bsc#1080153)</changelog>
  <changelog author="jason.record@suse.com" date="1518436800">- Updated hostinfo(8) man page
- Distribution information first comes from baseproduct
- Added CPU Load</changelog>
  <changelog author="jason.record@suse.com" date="1519214400">- Start hostinfo.timer at install
- Added ssh key fingerprints
- Added hostinfo.timer</changelog>
  <changelog author="jason.record@suse.com" date="1519992000">- Added cleanUp to catch all exits
- Added pre-existing run check
- Updated hostinfo.timer
- Added custom action</changelog>
  <changelog author="jason.record@suse.com" date="1520510400">- Added deConfigure for uninstall procedure
- Removed spec start and cleanup references</changelog>
  <changelog author="jason.record@suse.com" date="1520510401">- Added rchostinfo link
- Removed preset in favor of system presets</changelog>
  <changelog author="jason.record@suse.com" date="1520683200">- Added 91-hostinfo.rules for network rules
- Add INCLUDE_MOTD for message of the day</changelog>
  <changelog author="jason.record@suse.com" date="1606132800">- Additions to version 1.0.6
  + Only include hostinfo details in /etc/motd (bsc#1170092)
  + Fixed CPU load average calculation (bsc#1170094)
  + Added program and version to output
  + Consolidated memory output
  + Understands 3rd party packages on SLES or OpenSUSE (bsc#1170858)</changelog>
  <changelog author="jason.record@gmail.com" date="1616068800">- Host information now persistent across reboots (bsc#1183732)
- Fixed output strings</changelog>
</package>
<package pkgid="9ae0288c76a58916c6dc67fbe50c8098fe3cb1529601c7536ee122265f1d4a1f" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.347" rel="3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1600084800">- Update to version 0.339:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="11d8f9ae7416ff1d45fa5d53e066537238a41c58c383640d9c9d25ecadd0ed1b" name="hwdata" arch="src">
  <version epoch="0" ver="0.347" rel="3.21.1"/>
  <changelog author="mpluskal@suse.com" date="1600084800">- Update to version 0.339:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="620fbaa00c63d437b42e3e2597f191ec1cc7424bfc7c339b5b4b60bd7e7cf8b0" name="ipmitool" arch="aarch64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="41c5b085bd1a2b746b9b8d7f9eacd31f41cf4b6c14304ba8357526022b191b35" name="ipmitool" arch="i586">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="e93280b485a9e2466e15677084930ecd18dd978e498ed78615ef05f105ead029" name="ipmitool" arch="ppc64le">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="280e9889e2024c039b0bf68c8da394760b3c6bc15904c3bb52a7a2165c78d1c1" name="ipmitool" arch="s390x">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="c337b11903af1bbcd62a4b7aa75468dd076b8d3f619c3dd02b8844a2784e0220" name="ipmitool" arch="src">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="3d66c9aaf297f3663f240ca400c27106271c249fdf3296cd0f67311b73f0758b" name="ipmitool" arch="x86_64">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="0f5d51a9ce40976edc52ebef32f3342d3fbe4af01ca8b52198b6cad430cc8cf5" name="ipmitool-bmc-snmp-proxy" arch="noarch">
  <version epoch="0" ver="1.8.18+git20200204.7ccea28" rel="3.3.1"/>
  <changelog author="trenn@suse.de" date="1499256000">- Update to latest git HEAD revision of 1.8.18 version
  commit ecb4cfbff855bb24099f2a80a6dd558518702c7d
  All these patches are now included in one big revision (1.8.18) to
  HEAD patch:
  D    0001-fix-typo.patch
  D    0002-added-microTCA-major-version.patch
  D    0003-replaced-removed-defines-which-are-already-present-i.patch
  D    0004-fix-typo.patch
  D    0006-ID-461-OpenSSL-1.1-compatibility-error-storage-size-.patch
  D    0007-ID-461-Make-compiler-happier-about-changes-related-t.patch
  D    0008-ID-474-Compile-fix-on-nonlinux-systems.patch
  D    0009-Add-bootstrap-support-for-Mac.patch
  D    0013-ID-478-ekanalyzer-Fixed-decoding-of-FRU-fields.patch
  D    0014-ID-479-ekanalyzer-fix-processing-of-custom-mfg.-fiel.patch
  D    0015-ID-477-fru-Fix-decoding-of-non-text-data-in-get_fru_.patch
  D    0017-ID-480-ipmitool-coredumps-in-EVP_CIPHER_CTX_init.patch
  This is the big revision (1.8.18) to HEAD patch:
  A    ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch
- Note: the tarball has been generated with git archive from the git
  repo. It slightly differs (.gitignore and configure.ac) from what
  was in osc before. No idea why, but the change is tiny and does not matter.</changelog>
  <changelog author="tchvatal@suse.com" date="1501156800">- Switch to OBS service to generate the tarball and changelog
  automatically from git "osc service dr"
- Update to version git checkout 20170406.ecb4cfb:
  * Prevent autoreconf from complaining about missing NEWS
  * Add git hash and dirty mark to ipmitool version
- Remove patch ipmitool_1_8_18_ecb4cfbff855_to_HEAD.patch as the
  patch is directly in the tarball
- Rename patch:
  ipmitool_adjust_suse.paths to ipmitool_adjust_suse_paths.patch
- Drop the --pic switch as it was only for static library
- Reduce the suse_version for 1210 check to switch systemd on as
  the package is not building on sle11 anyway
  * properly depend on systemd-rpm-macros and not full systemd
- Enable switch for file-security to be more strict on open files</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added missing references.
  [bsc#1041374,bsc#976123,bsc#988443,bsc#989985,bsc#968105,
  bsc#948540,fate#321578,fate#321579,fate#320439]</changelog>
  <changelog author="josef.moellers@suse.com" date="1530187200">- Make bmc-snmp-proxy into a (sub)package of its own.
  [fate#322044, ipmitool.spec]</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Use noun phrase in summary.</changelog>
  <changelog author="trenn@suse.de" date="1537963200">- Update to latest git HEAD revision of 1.8.18 version
    commit 6f336d04f14b420822902dca7ef595cd49847d21
    Date:   Mon Sep 24 15:41:00 2018 +0200
- Change git repo and URL in spec from sourceforge to github
- Add download of iana pen list via _service
  from www.iana.org which is used to
  create a C include file at build time (lib/ipmi_pen_list.inc.c)
  Downloaded file added:
  A enterprise-numbers
- Add possiblity to create the include file from an already
  downloaded, local file
  A create_pen_list_from_local_file.patch</changelog>
  <changelog author="trenn@suse.de" date="1567425600">- Enable USB interface by explicit passing --enable-intf-usb (jira#SLE-7780)
- Enable free interface by adding freeipmi-devel package to
  build requires</changelog>
  <changelog author="trenn@suse.de" date="1581336000">- bsc#1163026
- CVE-2020-5208
- Use license macro for COPYING, instead of doc
- Add ChangeLog mainline log to docs for shorter
  obs changelogs. This will be the last more detailed
  changelog, due to more important buffer overflow patches.
  Otherwise this changelog will not include (mainline) changes
  anymore.
- Update to version 1.8.18+git20200204.7ccea28:
  * fru, sdr: Fix id_string buffer overflows
  * lanp: Fix buffer overflows in get_lan_param_select
  * channel: Fix buffer overflow
  * session: Fix buffer overflow in ipmi_get_session_info
  * fru: Fix buffer overflow in ipmi_spd_print_fru
  * fru: Fix buffer overflow vulnerabilities
  * chassis: bootmbox: Refix 62a04390
  * configure: Drop requirement for curses et. al libs
- Add a configure option to disable IANA PEN database internet download
  A    autotools_define_DOWNLOAD.diff
  D    create_pen_list_from_local_file.patch
- New pen database:
  M    enterprise-numbers
- Patches adjusted to latest mainline code:
  M    fix_file_permissions.patch
  M    ipmitool_adjust_suse_paths.patch
  M    several_more_compile_fixes.patch</changelog>
  <changelog author="idonmez@suse.com" date="1581422400">- Don't hardcode /usr but use rpm variables</changelog>
  <changelog author="trenn@suse.de" date="1622030400">- Use /run instead of /var/run (bsc#1185162)
  A Use-run-instead-of-var-run.patch
  Be aware that the patch has been submitted mainstream, therefore
  the git hash tag, but may not have been accepted.
- Correct /etc/ipmievd config file to point to the new pidfile in /run
  not /var/run
- Fixes (bsc#1179133) lanplus: hanging on getting cipher suites for 10 seconds
  A lanplus-don-t-retry-pre-session-Get-cipher-suites.patch</changelog>
</package>
<package pkgid="0204f467307b7f9b081ed7624776c8dba648b3a85e9a55c942cd21385a1db93e" name="java-1_8_0-openj9" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="d60c157c475ef447492b2958b39585724ba63365e16d0c63bd70bab2fb2f0456" name="java-1_8_0-openj9" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="f949d1dcbe6e49b26dcb424d46abaf30ce7595302156c3845fe3fdf38bd5539f" name="java-1_8_0-openj9" arch="src">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="66ee6802721a5914f3179f9a9b124ad77fd34c056d1ea332215b143db0d6e963" name="java-1_8_0-openj9" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="885d241e3b1be84fcfa6dda31af6591ebfbc6ec514d992acf82f074d7f2a9aaa" name="java-1_8_0-openj9-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="910713256ad4f42bb30f2f683afca5db44c0701b03921f6a208b32faa390346d" name="java-1_8_0-openj9-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="0427c3bb29942447cd7e64a990dab636a8d9b6d6074eafc55d15eb1de8b1bf90" name="java-1_8_0-openj9-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="3da86d175655790b5dd0717d6a7374a6f57c06dc9110c4127c6b4039b39c720a" name="java-1_8_0-openj9-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1dd07cd739fd6090fc77755aab25b71d0d33ce5be1381c778c1975d1f4bc5abd" name="java-1_8_0-openj9-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4bdf15eb332c9df5ed10dd03233d2c280aab508149e931c041765c5b8a1b9359" name="java-1_8_0-openj9-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="58c4fe5ee3169fe37d41eb5aaf490ab6912a9504c85fa374f4242cc71d2ce347" name="java-1_8_0-openj9-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="9e29b158bc05476dddb98ef1c12a314c57be49e70fca290a52442a016fa3df09" name="java-1_8_0-openj9-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="4e96e7983bb39f3e6a76d0bc0eb06ffc813a3cc62efa7aa49168d60f789d1c6c" name="java-1_8_0-openj9-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="65549ef8dc49e38c065689cf75f0b69e9747aecaf09a6f9948fbb3375f149281" name="java-1_8_0-openj9-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="09395d2bc93165faef4014848c506b1caf118db4a4cbd3f88f2c511f218bb49b" name="java-1_8_0-openj9-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="1ad0603492375d6281f2e75616e2ccddc49d04ab6aa8d550c391ba83edf73ee7" name="java-1_8_0-openj9-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e893421bf6409f9bacfb9ee33a29b3c2f7356e3fcb4f25468fd2c201e1fcc45b" name="java-1_8_0-openj9-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="ff6d9eb05ea4cab91874c42b55f19fdda7b902c805dae2f91b9cf4af4e86f0b1" name="java-1_8_0-openj9-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="e4ee3a98a2efd3f543c51ad542962f3756c1344da3c53264557b4469702f5cdf" name="java-1_8_0-openj9-src" arch="s390x">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="cc725cca886b5b2ca108177d5406deb3a91a6a607d2bcb005f444a3fc15d0a41" name="java-1_8_0-openj9-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.292" rel="3.14.1"/>
  <changelog author="fstrba@suse.com" date="1580126400">- Initial packaging of OpenJDK 1.8.0_242-b08 with OpenJ9 0.18.1</changelog>
  <changelog author="fstrba@suse.com" date="1586952000">- The pack200 and unpack200 alternatives should be slaves of java
  and not of javac, since they are part of JRE (bsc#1171352).</changelog>
  <changelog author="fstrba@suse.com" date="1587729600">- Update to OpenJDK 8u252 build 09 with OpenJ9 0.20.0 virtual
  machine
  * including Oracle April 2020 CPU changes (bsc#1169511)
    + fixes: CVE-2020-2754, CVE-2020-2755, CVE-2020-2756,
    CVE-2020-2757, CVE-2020-2773, CVE-2020-2781, CVE-2020-2800,
    CVE-2020-2803, CVE-2020-2805 and CVE-2020-2830
  * OpenJ9 changes,
    see https://www.eclipse.org/openj9/docs/version0.20</changelog>
  <changelog author="fstrba@suse.com" date="1593172800">- Added patches:
  * gcc10.patch
    + Fix dupplicate global pointer variables with gcc 10
  + openj9-no-werror.patch
    + Do not build with warnings as errors the OpenJ9 parts, since
    that would mean broken build with new warnings from gcc 10</changelog>
  <changelog author="fstrba@suse.com" date="1604318400">- Update to OpenJDK 8u272 build 10 with OpenJ9 0.23.0 virtual
  machine
  * including Oracle July 2020 CPU changes (bsc#1174157) and
    October 2020 CPU changes (bsc#1177943)
    + fixes CVE-2020-14556, CVE-2020-14577, CVE-2020-14578,
    CVE-2020-14579, CVE-2020-14581, CVE-2020-14583,
    CVE-2020-14593, CVE-2020-14621, CVE-2020-14779,
    CVE-2020-14781, CVE-2020-14782, CVE-2020-14792,
    CVE-2020-14796, CVE-2020-14797, CVE-2020-14798 and
    CVE-2020-14803
- Removed patch:
  * gcc10.patch
    + not needed any more in this version
- Modified patches:
  * java-atk-wrapper-security.patch
  * openj9-no-werror.patch
  * system-lcms.patch
    + rediff to changed context
- Added patch:
  * omr-no-return-in-nonvoid-function.patch
    + fix build error on some systems</changelog>
  <changelog author="fstrba@suse.com" date="1611662400">- Update to OpenJDK 8u282 build 08 with OpenJ9 0.24.0 virtual
  machine
  * including Oracle January 2021 CPU changes (bsc#1181239)
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.24
- Modified template patch:
  * openj9-nogit.patch.in
    + replace git runs by pre-fetched git hashes in new places
    + remove hunks that are irrelevant in new sources</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to OpenJDK 8u292 build 10 with OpenJ9 0.26.0 virtual
  machine
  * including Oracle April 2021 CPU changes (bsc#1185055)
    + fixes CVE-2021-2163
  * OpenJ9 changes, see
    https://www.eclipse.org/openj9/docs/version0.26
- Added patch:
  * maybe-uninitialized.patch
    + initialize variables in constructor
    + fixes build with newer gcc</changelog>
  <changelog author="fstrba@suse.com" date="1621166400">- Fix version typo in spec file</changelog>
</package>
<package pkgid="81cb622a4b4b9c7098fbc1b5b52fcae796d2ab4963f07028ad7ff5dc33ccfde5" name="kernel-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="03d97648cd1a42ceb98312284da46276b9582616a178a30a6e885c3b891f62c1" name="kernel-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="e7c5f9051c4f0066d5740e804c1bca6af5a462d635027b2fa5678dd62bca4ab0" name="kernel-azure-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="c6a6401141d690fde7cab5ccb94b0e96636024936659693b4480f8d45908c1fb" name="kernel-azure-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9c456afdea8fd21964cfb912237c669994c502a103c96da7d4f6a4e9589975be" name="kernel-azure-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="da8fa4114a96b61aa77fc25bcf4ed5c454bb985e3be819753af81a32621165ea" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d65a9708869f5a5208e222def27840532d6d876cfe2225e51c43399ec85f88df" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="cbc731be109460a37f38190bf59db24ad6cba7d63a967e63737f32fce6c8e968" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3e1c685f20c3e60c38b426234c2dad65b3e8119c24a2d44a6a9ee9cbb2c3a53e" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="540a3e787f5617c20048912ce83653bb1dd4841e8ed8039c5102dd31d5e346ff" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="75f8047203904f505e20df3d5e1ae9be0f1e521ebff59bee8576ba259c233db2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="da0d97fa9eabea682ff005745551e3e264a9d93ec6455dc55b35a91ba65d106a" name="kernel-debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9c0e4046dbbd08de08b0e215f8fd7e0049e7ed9b5c0ecd5ac21f30248ab82aae" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="05fd2039a5357bd274c0afd59a23cca4ba7ca3cb2388f2fee5d7ab8157b4c380" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="a1d09dce7081fc2d3c6832593c11ed852c6393e3403b1e914fa342f267b18047" name="kernel-debug-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9e434a96e76905cee5af9e2649100896fc9c4905f34a9374aeff96132e0ffd92" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="fafb793d17d84e4918d9a1cbf86e7be835dcc36457c401a326e7a5fd770c115c" name="kernel-debug-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="1581bbddb515b9f406ea5980b6be886d1042fc247dfe81aa6c1d08337b31ca27" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="3bb61491bc973de9a1a4c81bf1e9140fadeb103a93c4f352560ae56cd1ff70b6" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="50850e7130d9c3e3849f63213809d3b05d6d12c713ee31e62e5c01cf77b70f30" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e3d17a104a86bcd3483d54dc1843bbeea58eecf185effaf60507ee1c657a7a74" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a289a15407f607fcbfdaa5eac1868713357e1c3bc8eb4a9ede21bb7ce9532baa" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="ab706526931962f0ac1413ba7339df0e9592d3cfd38e8e143d0857480329d58c" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="326b5d5e648f3db2b4a99f5b25bcc13ac47f1d1d1da4bad2ffc31f29ef6deb15" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="405642d12bb002b3cbda9b9d31163859190f0b968651f17ca64e481040414321" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="21f449642791a3df668f4fd2e283d591a32f793aa2bd8f9ba49fac16cf6275c5" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="70a8c1f279d448768b353e4e2e61dd22461d619af127958c60ba8b7fb4ef58e7" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9efa48e816b70c4b98463dc7fafaa27383963cdb203fa022907e1bd084a26e60" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9a2566b641a7949f7debbf2d877dd34cbde08019121a6e01eb430eace273aa8a" name="kernel-debug-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="05604d49ef11f126bdaa30768c4f5012edc1bd4002fad7a7a89d80142cdffb3c" name="kernel-debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="794320920f4402b66f5458af7b207f467d54b0908c48636080cbfdccd49e2ea0" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="86fa195d72408d13c8ed0e218d47702f24c5bb51c8ed7f5a2277064513b98462" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="446d926bfee871afc718e90f6be5b68fa242ebbf4abd327cc91e23b68d40020d" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1ae3ec350ed572a644a92dea2bcbc6ccae75135dd3a4154c2fcfa4d987bd5f89" name="kernel-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e66443d7d45d41932ad75ea2fde8b9b2f979f99c2c2237e8fc40c92e598a39a5" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b9969781c1c8bfb86a1d104ac6ac4bba0cbf1dd259c80683da107a7aada3565b" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="aaebf0584aa96181ad8bb1f4c953ddac83c74a58854bb04f40600a88eb2027bb" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a36ba345c55b764cc277ec810957c60be7e32872e8be93256b52cc74b592c501" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9db2e577cc7736caf7f861b736725cafe146b7cae7eed80400a5bd720f2a2a11" name="kernel-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="24683a335d423dd8a16481d17b135c9b1928ed0d70dbe11292504708ee07a21b" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="d928d0649d07c0ea03a09cf2e8bb438d2475f7acf7e42c719ba243052b9d92c2" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="88a171c0454eff42a7172da17656064b6572851c0b11643ee6aeb86b33bc24b9" name="kernel-default" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="f83ef486816ca76c845e4bc5250b8c6d554dd0cacba41873a14edfe3dc61e62a" name="kernel-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="947df20d699c512ac18416727de2c225d56ec1d7df77ca4f4a9c641289e65b23" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="bde4c882e040f1e932143c32d0fe512d29e0b5004b22941f2b7a5ae9b7101648" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="2dd08dd17cf79c9d05e2ce1dfb1948a0c6a875242fda07e289c45e7c77d05fa9" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="132e4c2534cd454b31ec96a0b8d342eb52915afeedc5d18f1fc7ef3d866a7492" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="453b11b8dd925ab79ffe739288cc264c932f91ac807f554895cec37ffd183303" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ae0073c8d7972a02ad0fa797d641f08401bdab713c814e9e5f9ae2ef72ac0957" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="676343824cf0c543d9655507d710a46a3669716d59a857081494ab7bafe1d680" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="c0842b4e1d0090810e60d6e8d1251debcfe68c5197d4471833724e929376c900" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="67f0a01ebe5ada8c03b0f94ce9da221275fe9961badb49cf412f5cad2813aec5" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="40ec01cb5580cf02b6bb1fd85ed1bae9cc7a7b171c2a4126b72e23fbf8a17963" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="cdbe75ec9d762016bcab62453513468f65c33b56fd86519e3d301d919483c4f0" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="e51d2da5f57903bc3dd05585e0a1a6f0d79ccc7430da8417c6458606b0a062d1" name="kernel-default-base" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="fe56e3e94d00967f09f38ac7191f7a4a038ae90d237ae0e8b162049462dfefad" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="69cb5cbeb955f13e09aeb00e5e7ab8424d74e8d811ce4fc0aa944cb76df2897f" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="75259ab09365f5374465643ce3bb76ae5677c0e22434f1b5b1fc087bfd647cc6" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="afb95a498a3f842be799350c5c88bb2af9d117ba6bc75b02b3aefd9a5dbd1080" name="kernel-default-base-rebuild" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="a77cfc31f0ea44965dc1712f98d2f84a7f9b5846f79c0b7ab5cad7f8917eae62" name="kernel-default-base-rebuild" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="040ee61930c09f11b05455e8ba0ab58f57276f62cf7720a5d73badc5b6fddc55" name="kernel-default-base-rebuild" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="11d8c6662775464d7ca7003f7528fe5e03aa04e0be6085843549ae56708d53fc" name="kernel-default-base-rebuild" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3.9.30.2"/>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
</package>
<package pkgid="81f6cdc0acfb15f744e856ff12c691936a3d84568627c6c6f6d76b58735de8ad" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="22fbb90f0b279adb8f19657878610a4d2f222ad7601aa202af4caf3359f28f52" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="64ccac0052a8b2c02f4a810e851da10541f0cd26700dadc99246b258ca1e7ce6" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c9da886a35919a7e128dd5b98f6ecdd1ba3e2a13174d270e3ac2b0ae18f36590" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f8b95f42d583614a70b695b3bd9196cdaa9064fad464ee014fe2a8a93593816e" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="049b97679d2babf0baf23403b61b3c20339e62b288497db28841395ddcd8816a" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6dbb1be8dc331788f88398934cb77b42b18d703cc51fc8c2c87f100ad7f179fe" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="8cf65d6fe21d7cd200cab250beb2b9949514b8660910fa6cdfde1681a8baef3f" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="862d99a563bbe8611fd97f489dd5ff1955b75e026bf977e45288fd3405a44d71" name="kernel-default-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="b14af45521bedc11dbd7b85a41a2e6b7c2e683a260b7e1010fa444815e0d5e07" name="kernel-default-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="e534a743a8281422d34c0868641691acff07cf4a4f04a7f04e31e089d7eaeaf9" name="kernel-default-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="447e6a9eda5cdb4bbace8fc84f347f43dfe4c14792eded1a896a3468ce3d6704" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="dcd605818e57fb62a2032581d3279163f3f53900c839f033ddf9975a5693ea39" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0a70d168eeb4e2a33ad8d3839bdd34da6c194a50ae278db47eaef27d5d63fb1d" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e4b356edbf70cf75d86f8bb4a99ef8713492fe7e0648f3a4d206b448c6629438" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f0079f52be192149a35029c7c866506af69282b8f3d6c7d92df44c946fde88da" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b9a28b010c40b38ef5db0e8eb560655584fb01fe03f7829eb98cbbdb95270b59" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9274a8b59325c6693cd75ebf6be486894e5ed2b5aadd779fbe10b85c816519b4" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="ebfd30ee789f9de7988f876b0e2521a0904dd4f8f811b7a62ffd0e5c74ccfc76" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="b1af61a95b786c3382295140a29dc89e985b31b48a8d177c9eef6890182550a1" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="adf071ca7ae735f25b6419e6185bbf7e6e18e147ca2ad5a719f3de32ac4be70d" name="kernel-default-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="e01de858eb8177e58f8380d9b56e1ac30ddce65e1acdbef511db741e1627ac2e" name="kernel-default-extra" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="aa7568b300aa86752c8d6ff0b29971a68238c9b0fc77a1a2c8f75df26114a502" name="kernel-default-extra" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="f15db06c8a24044b64431e0cf4571f448b04a59db02ba930e58f9f9277bc4da4" name="kernel-default-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="805135026597a3afd73653b9fca108f34b4c19768921b7b7ea81a15f353d298e" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e9dd2555adef407484c05c0901ab8c97fd4a4b0b27f5961e24575485d717b8b6" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6070cd1a79e9625facc90c168baab918b7cb861182e2ee4a0d0dab36cfe53031" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="b74628de4bc743a800ac9986562214e265c5e52ce691155c6faaf17637b5fc00" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="5e2aca2a8d7c7aa7b6564f68293692a6fdff4671776dd00590578715cc8c91f5" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="34fd70c860dc04363ee17a96796e931022c60be7b9c7444c80aff8f5afd05d21" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9edcfc59ec60472f7db51b2a2e810d710dc4608d65531b0c2c1e52d9f39722c8" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="e04f085e9bba704030aab44e5c27d08b2a6b127709b86cc454224be257d41a53" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="c0e8fac76114357e4ec6781d04c7aca4795098384bbde0f32f995878d1d471f7" name="kernel-default-livepatch" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5586f3a713d89500a5ef53e6a70cc3c484c7ae3c79ae94589b740996340b8fc4" name="kernel-default-livepatch" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="6f3479f146661bc548095ace9686d5216686b49d803348ca3f0fd7b864f5b202" name="kernel-default-livepatch" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="4df3f9c544d962eda4733dd61480ce2080661d96aa52587d6d9325bed2934d48" name="kernel-default-livepatch" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9e252ecd021b07a43e8edf4c4095fa8efe0b721fcf7f240f5930605c29efe79a" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="4e75c28477c43a3a1ea4ffd6d976d32c32585ade67e64329b414e80053c2ad18" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="41b7d3829a1a431e539052388a1830abe2e2d8f28ae8f25cfa789c74be642f80" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9a239444c99251f31450fb385f80800482189fb4d5512c3fcbb03f12b387184b" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="734a395ea7541d653ac50fffd36f150d6796ce5b658ed0574a3581e9a270aeda" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a883b6f678d9715eb48536b7a80f5a739ba9fe17007467ea53dabc5dc5a9da57" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="7e920748f2f9377385bdc7d89a57c1985a286b389f7214ce07a0e04daba9fa8e" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="74c698cd0a5781de71dafa882b098b51362e5b09917dc5aed1062996be195a0b" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a6176ae76a4516c12f2a9fbeecab0a071379b3e97cac01195f98707f85b8d8de" name="kernel-default-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="2650226ee8ec5373569a727bc124b5896a398135d28ad3f79e4c2e995a07b1fe" name="kernel-default-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="4d75ead2781e9c672106c66be10e4a6ee0f69bc7a3364f1e633a2f06b292bebc" name="kernel-default-livepatch-devel" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="bdbd2d60e6bd8f1d7a6839478c58c1a88b62dcae01cbbcc0b93a2b4de5ec8c12" name="kernel-default-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="63abc27ccc03f06d05d46f1807d3f1af3e1e75d6ff1baa0f434307641a8ae383" name="kernel-default-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="649fbaf961a275be191aeef863d0be89d3d0dbd61c0025893d0ed10669501017" name="kernel-default-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="0a6158ed7a4c13296d98ee6f5748487a49729ebdc02dd5d65b5f166d3a89574a" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c71c5129e2ad028cbc88424e8826734250ac56d4bdbdad046c71a2647a5a5427" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="941b1587c846e31863f25b24e54c5c7abe8f97aa3245132916a14069e3e820e0" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="a1160d23340005b881325fe797dbc9dfdac0d07a6fd8a68156f3971d4688df5f" name="kernel-devel-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="4e0085ce5f6506a6ece968750e478f5650f815e1481a944f7da315088b6093e1" name="kernel-devel-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="aef96eedf884109cfb12aaa1d71d32507509f2e591299d1d0604f8c4044eeb3c" name="kernel-devel-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="a8931d9df40181a27e99f10e959fec961893663d553900d7822f06b916909b7e" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="de0ddb743041d0a4fe98dcf1d22a225419c3f1ff9cded667d707458693fcf944" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="7c0edb6920ae2c742969accf54dc66ef1722d0c4306b66ba6a7583449955e52b" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="f52b88f1b080e841c6c5b91d0c82d62b634de8fec0a54faeb705b5e534b467c4" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a9da1db56188ff78ea79561d5dd009babc2926bb4717b949b9b89244251359d3" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7a637f326b7710476efaabd69a3cc1f6e8aba2cff0e7bbce1a36a437f01c6461" name="kernel-docs" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5a0be56cd7c32359ad214ddfda4f97a8ff686b98434312de8d1024d0e08a3a53" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.3"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ece036c247eee6434f7389e86ca285d67a3fbd92533e4a6689c9c92d960eced6" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="e1b1a4f8ee43fa0a48ec2e1166d7b08f74db178d8167c435d5b69f666d5e4801" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="a15d6207981519532c468ead3d00af2db76593b986daece39294587754512c0d" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="06f5ac38efe1c5e50d8a9d4140ce2a52a71ab80e87ef5089ab593d1842f9fd4e" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="4fd14530d7b1b685a8ca50e90b81a5ce0edb5c55a0159e649921d0000a989e6b" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="88bfaeb79a05b2ef2df65c71cf4f66865e5fbe7416f748d41b7c7644b1b2d6a4" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="0220854e322e9c654c87e434ff7e8f511f7d4f707bc12cf6ba350fafbda9c718" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5ef49a49a6601bcd9ef442db35aa3170a874cb1f540827ebee17182cf23f8abc" name="kernel-kvmsmall" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7f3de1a14d4843d1e315fe5b776e83f5f563efc398c50bc547310bb9fc25daae" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="65d65a5444f07ef4b0649f39da29a6e3e3cc8558a6dfc1f740e1be8fbbb3a267" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="48f37fcffdad257ab609acbfd5b90ca2c1b4b44ba904d1b864f7b1c861d08ad6" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="0e4f5a287fc8ae174a8d66a16dad8e5e6443f3c6387a3afe7c0e1ad81f270cd8" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ec6c8492f9d1a2d95dd95c3f92210719138f0120b6d9a9544e781400c5e5fb21" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="0eedca5cc42be4e54ed8f0ba014c1d28ea7ff1b6b3825436b435cfbbd2cc719d" name="kernel-kvmsmall-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="28b9e5b74b06e31b471f5e49100b94c1d3f4cd9f44d097ac20107937f17ccf05" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="24c33cc9f6f7356b8584cbfc1281b6208000eb01c76853ff4e3cd146804db3a3" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6334dafee54d71d149b59a78b0bcd5bdb7e61b888b86e0a31a78aadfddb78b06" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="fe7d02690909218266ce59fdb3d5ae19a5edc9c208bc7467c236127656206a88" name="kernel-kvmsmall-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="0eeb7c7e04c7b8b668043057135da40a7269c49217d6399f131fad9dae93d2da" name="kernel-kvmsmall-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="4843f8986ee3027be8fe959e8f434c8e28867c24f1281af0cd7da50ce83e8f1e" name="kernel-livepatch-4_12_14-150_52-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7413ea5</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 3837119</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 92004f1</changelog>
</package>
<package pkgid="f98c806ab48131246237086c9de7987fdf408a5677fd8030911e60bcb5a580b2" name="kernel-livepatch-4_12_14-150_52-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7413ea5</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 3837119</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 92004f1</changelog>
</package>
<package pkgid="60dcb8968f0e20b9c0f0f02ea04a4c9783f0cf120b2f73c66611b68257bdc6ea" name="kernel-livepatch-4_12_14-150_55-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a813e31</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit e1d2cd0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 29a78ae</changelog>
</package>
<package pkgid="53b554794d6235f950bff1a6483b8af2930354f6c315ce316e67ed828ac46bc1" name="kernel-livepatch-4_12_14-150_55-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a813e31</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit e1d2cd0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 29a78ae</changelog>
</package>
<package pkgid="92772203670e92363307f814e41293b3a7a2ff4e7a4de77a8f9b28e30e01ece8" name="kernel-livepatch-4_12_14-150_58-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit caac1ef</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 76f7559</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 4b51702</changelog>
</package>
<package pkgid="3122504d21024e56cec6c2a3980b632e162c7537810227eb6400a01290bc8c30" name="kernel-livepatch-4_12_14-150_58-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit caac1ef</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 76f7559</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 4b51702</changelog>
</package>
<package pkgid="62b650604079477e1a83b7bee0e0d10e610fa514cc8ca2af7b23efaede61b994" name="kernel-livepatch-4_12_14-150_63-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 1dc2d12</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 160d316</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f42a313</changelog>
</package>
<package pkgid="86d8a67cdf43eb9e4d2f95b41fd92dde61bd39d0e4f6d22c44a44cab0bfd26d0" name="kernel-livepatch-4_12_14-150_63-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 1dc2d12</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 160d316</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f42a313</changelog>
</package>
<package pkgid="6bcaf5677ee33cb8a65b0073a2a44c410ac0524274b6e021d646aacf2ed07c73" name="kernel-livepatch-4_12_14-150_66-default" arch="ppc64le">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 51cfc0f</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 2bdb09e</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2e3bf8a</changelog>
</package>
<package pkgid="178435620dd0fadc8b1158374458f0dbde36f5b1d86817ea6c5575249a112262" name="kernel-livepatch-4_12_14-150_66-default" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 51cfc0f</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 2bdb09e</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2e3bf8a</changelog>
</package>
<package pkgid="f7858a5e0313166f51235986165039c771fb352b8ae5d80eebf837dae4ef7761" name="kernel-livepatch-4_12_14-150_69-default" arch="ppc64le">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 9621885</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit bab4d29</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 038c1fa</changelog>
</package>
<package pkgid="467d4e281d75821f8aa0b5d095ab4f1cbe3b068f3f5cc58c7f874958c51dd4e0" name="kernel-livepatch-4_12_14-150_69-default" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 9621885</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit bab4d29</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 038c1fa</changelog>
</package>
<package pkgid="64a55f85034405f7bcdbfaac21a26eb6c976df0db615ef295656a595ff0dce72" name="kernel-livepatch-4_12_14-197_45-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="2a15e7b6f08511c075e699259c8ccd3227d4cf87e79c261d42ff486dbcba7841" name="kernel-livepatch-4_12_14-197_45-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="b66672964442cc0c4a82f5d7864f8fcfcb660ec06d7ea3ecc540982887174e56" name="kernel-livepatch-4_12_14-197_48-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="93411f548418a4a1ac497b9435d310e545ee2c3024817bc70b24a92ead5d7ee1" name="kernel-livepatch-4_12_14-197_48-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="dc9ab0c8af1dde76eed11c1f8b454c2af20da0d962f895a1f99f2f3a6aaa1d94" name="kernel-livepatch-4_12_14-197_51-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="3862e28530b44cc82cf42928aeb6e0f94d38d4b6e49ee6fb705a7438f0b06396" name="kernel-livepatch-4_12_14-197_51-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="3b88e23693952f58d164eac7c5de5242796e07dcf069b69e01214cf1b03f76c1" name="kernel-livepatch-4_12_14-197_56-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="ff217d23e709c7b2e56b5de7b1f6f2686d7ea51817757139d8800b27bf62fd39" name="kernel-livepatch-4_12_14-197_56-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="5752ea5b1a5f8068f8a28c72b308aa832431353c51a8cb9e44fb72e915a19e56" name="kernel-livepatch-4_12_14-197_61-default" arch="ppc64le">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="d98d85ef3a981a1016c865fdb7ffb2b02f4f1c828ce0d9aeb5508547dbe46d3c" name="kernel-livepatch-4_12_14-197_61-default" arch="x86_64">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="cf24e1aac064fd8354102a9154a11757f3f59996a78931702248c857f2c5e2cf" name="kernel-livepatch-4_12_14-197_64-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="f73d7d74803248c15f7dd83fd65026293581f32f31313c8d48dbf968f3678862" name="kernel-livepatch-4_12_14-197_64-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="9fb5cdbfc2db5a38fb8c920aad8f29615754310764b9e109eab62834209f2e2e" name="kernel-livepatch-4_12_14-197_67-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="b4a28b03a1db97c06c8d3bb73d19ce9cac3d221e0b1b45ec8853ffbdc71b0a75" name="kernel-livepatch-4_12_14-197_67-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="6cc10e88c4ba7ca682636d40f4a6a95a60c52b2c43425ad12b915f9078aa81cd" name="kernel-livepatch-4_12_14-197_72-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="6e816b253d22e7a5d0add6a47a131cc031f4a2f8cebe607ab9e426dfea0951a3" name="kernel-livepatch-4_12_14-197_72-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="0baa81ed26b9ec6bdd5531fe3720218547dec9c297b556e9d77aceb5a8ffeb55" name="kernel-livepatch-4_12_14-197_75-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="fc263b4017d9dfdd62d7d27cecdde5a951fcc29ca8c9e03d2304237ac2e0840d" name="kernel-livepatch-4_12_14-197_75-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="ec2d9ca3080d466dc78af1e605fc945cbb3b12bc33d68f94805b3d81943ea71b" name="kernel-livepatch-4_12_14-197_78-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="69a6cff41e1ecbb9a930ae736d941604dfd0c68593212fb68d88ea231bfa4abb" name="kernel-livepatch-4_12_14-197_78-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="215075f3c526241eb47a1c53233ab49a6027f19e6ed2879d0eb98f84bd61d1cd" name="kernel-livepatch-4_12_14-197_83-default" arch="ppc64le">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="097852b9645ddc70bd743c8d4381250cfb9a5163b7964a6927c7ccaa12c9180d" name="kernel-livepatch-4_12_14-197_83-default" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="d7534fe975ad5f59d69acdc01a98cebed73cfa9fbf6810fac2741b2905184db1" name="kernel-livepatch-4_12_14-197_86-default" arch="ppc64le">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="5e68d8fb408cbd1e42bc45cb5e1995370dc3926c6fd87cea1b0b3275b6e1540d" name="kernel-livepatch-4_12_14-197_86-default" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="807349346a32e81934a772106ac94676aa75592bfbfea499142fb1affb23bb06" name="kernel-livepatch-4_12_14-197_89-default" arch="ppc64le">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="72e219e20e91b6a778ea3f4a6429f761f482f25c39ae101b488defba15f17a32" name="kernel-livepatch-4_12_14-197_89-default" arch="x86_64">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="eec020ba6af0c0bb45b6812b8773cb1628933410a50734fd768bf521a9e8c7bc" name="kernel-livepatch-4_12_14-197_92-default" arch="ppc64le">
  <version epoch="0" ver="1" rel="3.3.1"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP1_Update_25
- commit c35ae03</changelog>
</package>
<package pkgid="484d84a2defdb5b75c7cf6b3eb253db838c43194a9ec413df737897995b58375" name="kernel-livepatch-4_12_14-197_92-default" arch="x86_64">
  <version epoch="0" ver="1" rel="3.3.1"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP1_Update_25
- commit c35ae03</changelog>
</package>
<package pkgid="3951a80624afd983796fe4b29bb9bb8a11c101ffc6b6738f458951fb0a32e863" name="kernel-livepatch-5_3_18-22-default" arch="ppc64le">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="615eca47a3112183fb89deecf5ebc9b49b0ec4df7b53777c9dd205ebcbd05f8f" name="kernel-livepatch-5_3_18-22-default" arch="s390x">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="5f7de8897533403639ab9816024e96ccd50775ca3b26c5a1e836faa5da4f39cc" name="kernel-livepatch-5_3_18-22-default" arch="x86_64">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="450ee63b1652ca7729b42713fa93da36ca7125e56956f4b28e56a43a145280e4" name="kernel-livepatch-5_3_18-22-preempt" arch="x86_64">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="a7f3f439acd97ac2efd8a7edd2bdf8323b17a56f8c1aa342080fd6925bedf18b" name="kernel-livepatch-5_3_18-24_12-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="0d5d0d494b4ce225f71c3db67cf29db4f7417ae019ba8a1a48d0bad389bb5c9e" name="kernel-livepatch-5_3_18-24_12-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="558e2cc98591f35ef1ad2f1d4b80fc149343328aa84fb9187663ec54e5aa5fe1" name="kernel-livepatch-5_3_18-24_12-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="522677e4e9875199be928afce2b105961f0e7f84eb0cdafaf88bd9035b4aeed0" name="kernel-livepatch-5_3_18-24_12-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="8d530b7b4f24e1232ca1b75429b508723574bf0bd14ff6c6e84276a459c06a4a" name="kernel-livepatch-5_3_18-24_15-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="aeb9ce4d50e21dcf71459baeaf19e01a1b63f5389b310b05a3d83a3d2f435c7f" name="kernel-livepatch-5_3_18-24_15-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="892441dc5ee9194e838cc0dcb2db705451bfb4dd1278f837bd10817fe0111656" name="kernel-livepatch-5_3_18-24_15-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="875a7e2db86cf96beaf5d5ac38fcb303252eda21f2ae747863b9584c59751aa6" name="kernel-livepatch-5_3_18-24_15-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="256de684460493425153938793b84556c4ca19ca72f80ee18e73de3700e5cb12" name="kernel-livepatch-5_3_18-24_24-default" arch="ppc64le">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="b2a0740f41a275ba1803aa25e92a5d652e50aaf5e7b8a6f797f09c9b18c413bf" name="kernel-livepatch-5_3_18-24_24-default" arch="s390x">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="71ac40fd3a9c916415c14b18615165846d9a27d4a6a113822a240760adda45ab" name="kernel-livepatch-5_3_18-24_24-default" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="6ca4307cbaf2d4c60bcb326dde0e2eba2629f03b2bbaf95dc08db72283137f41" name="kernel-livepatch-5_3_18-24_24-preempt" arch="x86_64">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="dfe422579a1a0c3d6444ccc27c3485ddccabc10069c3e03a18d15c393edc5767" name="kernel-livepatch-5_3_18-24_29-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="35d9d7826a6a7c0c04eefa677b772a8a1ee1845029bdae26df14c62e08473f47" name="kernel-livepatch-5_3_18-24_29-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="fc8712daabac114a7c36d5bde9cc316f41c9c2afab00af436c0474ce25579d7e" name="kernel-livepatch-5_3_18-24_29-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="247e52f154874c3cf7a8e0a23a581f166af04ff59b85fb273daf583929943b36" name="kernel-livepatch-5_3_18-24_29-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="989e85994a44e9b905314f4d1b04160387618300d38e5b257da60bd7f00b9b4b" name="kernel-livepatch-5_3_18-24_34-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="79195f393d9566a6a8076f6aca54655fd91e16cb23579d04031ef7a3628766f7" name="kernel-livepatch-5_3_18-24_34-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="a121003f8e1b9bbe8a5410c01c4a53733c20477b1c6350b8b3ab15cb110b356c" name="kernel-livepatch-5_3_18-24_34-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="5fceb701010ce620019194484cde48babe0f10c81f48677c5d99706b756bbdb0" name="kernel-livepatch-5_3_18-24_34-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="622a24ced4a013cc4bcfd89312b6c260376a41b93dc84e36a61d3d4680fd1550" name="kernel-livepatch-5_3_18-24_37-default" arch="ppc64le">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="6001d864599d2f44f33c767d4056e40f49e0f899439e46afac447fbec7e81db6" name="kernel-livepatch-5_3_18-24_37-default" arch="s390x">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="2bdbf04b5c131e84c357b2f2ab33f84f84116a29a0925a23d570c5ad2e1b375f" name="kernel-livepatch-5_3_18-24_37-default" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="ed83f7f3ec0b129fbc511ef62a476709e9b7a9f14dc96a76a095872fa0a57f7b" name="kernel-livepatch-5_3_18-24_37-preempt" arch="x86_64">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="71026f9a270add652058212e3931975fefb4cb0f278be3172147ce91a1a58954" name="kernel-livepatch-5_3_18-24_43-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="1f83714fc8e8e8962340c007b41aa6b82b80b240d266589a9a9403ce670bd7d5" name="kernel-livepatch-5_3_18-24_43-default" arch="s390x">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="bcd1d3d6fc8e247192db47e54ca954553f571bbe21b5bbc9c38b48f952416312" name="kernel-livepatch-5_3_18-24_43-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="c1534769ecda8a388273b99e34ecdcbc8e7b2be3647254a71b4a6cd22e1be92a" name="kernel-livepatch-5_3_18-24_43-preempt" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="abfa4df1eeedaddbf189755439012aad36b8097d7266eefcdfd76136418f01b4" name="kernel-livepatch-5_3_18-24_46-default" arch="ppc64le">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="80ca86b06b10509f86c4bd9097374e6438594650c70405823d928021711a399c" name="kernel-livepatch-5_3_18-24_46-default" arch="s390x">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="6cb99163dcdd51b211002f6ada474eaba708b06e9c8ce7e29175a558afe926cd" name="kernel-livepatch-5_3_18-24_46-default" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="7bd93510f08aa0dfbcd40580630769862206d424de5528061498d9e34e2a7da0" name="kernel-livepatch-5_3_18-24_46-preempt" arch="x86_64">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="d11fc71703e1fa8dd302248b941a12e0fd7795a2035dc5083acd784df555844b" name="kernel-livepatch-5_3_18-24_49-default" arch="ppc64le">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="8ab23529033b799421167a21a6262807497ec4834f57e66f1c00a76fd1e0f3ba" name="kernel-livepatch-5_3_18-24_49-default" arch="s390x">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="1c3aeaf808b23e0129b73fbd34a83a8897b692075f8b880c616adf5678430676" name="kernel-livepatch-5_3_18-24_49-default" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="9035324958b28cd7ead2a5dcacd2bf36744b6eb5bc110536f84c3c1df043648c" name="kernel-livepatch-5_3_18-24_49-preempt" arch="x86_64">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="9c9284346dfea05c779aa39c1961fe91c891d2bf2fc1bddb4f7a1ee3bdf51e01" name="kernel-livepatch-5_3_18-24_52-default" arch="ppc64le">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="4f038f66966a512f96f08faa2269ea0d6d714d3d292059a1e7ba620929df8a42" name="kernel-livepatch-5_3_18-24_52-default" arch="s390x">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="24ce4b2f9aa008378b85868eb3ffb19f87f4b2bb04a8d853146f85d09e342136" name="kernel-livepatch-5_3_18-24_52-default" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="ec75b7b6b10dbbba6d5b0ae8b885ecdc88652c34bd74492b6ec042c5576ffa11" name="kernel-livepatch-5_3_18-24_52-preempt" arch="x86_64">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="49b774a0c2a2485eb6f318ff45428f27dc4b39ed4d87fd823c9e2846cbcd9534" name="kernel-livepatch-5_3_18-24_67-default" arch="ppc64le">
  <version epoch="0" ver="1" rel="5.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP2_Update_14
- commit 700d70e</changelog>
</package>
<package pkgid="2e56e7e118acae5040c9959a077167766dea2416cec1eb3153fea77eafe1cc27" name="kernel-livepatch-5_3_18-24_67-default" arch="s390x">
  <version epoch="0" ver="1" rel="5.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP2_Update_14
- commit 700d70e</changelog>
</package>
<package pkgid="d6853920589e206e28bc1107f969d3d00e2d5d90d038832f678d3c53c40eec96" name="kernel-livepatch-5_3_18-24_67-default" arch="x86_64">
  <version epoch="0" ver="1" rel="5.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP2_Update_14
- commit 700d70e</changelog>
</package>
<package pkgid="bccf5220c5eb29d32c65fc45bf198336dabf0e05938d521d17e786fb8f33fbc9" name="kernel-livepatch-5_3_18-24_67-preempt" arch="x86_64">
  <version epoch="0" ver="1" rel="5.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP2_Update_14
- commit 700d70e</changelog>
</package>
<package pkgid="996175369f178b62c584d9ae91f43be298c744498d09576d1a6e468342a09f6a" name="kernel-livepatch-5_3_18-24_9-default" arch="ppc64le">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="0141ba36a7944e3d7d3e17236344e857fab01604107b60e0ee9d926f4ae99ab8" name="kernel-livepatch-5_3_18-24_9-default" arch="s390x">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="b5a8e97ecd9ae2382eb60b0cc6d47d6bea51f1db68a37b5b63365e42b4adcce2" name="kernel-livepatch-5_3_18-24_9-default" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="082526d7cfeec5e05aae5d765455719af6aa36f9a6bf49b17975fc4f164d1376" name="kernel-livepatch-5_3_18-24_9-preempt" arch="x86_64">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="8a5187b21c98188164fbe009caac6c14678827283bbfe9806afceaa7e4f4cd6d" name="kernel-livepatch-SLE15-SP1_Update_12" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 255f4dc</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d55cda</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8fa3ebb</changelog>
</package>
<package pkgid="e2254ab09d7447c6f658461c4f8a13ab499171057b80a0bca9eefac3d137dc1b" name="kernel-livepatch-SLE15-SP1_Update_13" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6a705f2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit dd9b8d9</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2719aaf</changelog>
</package>
<package pkgid="25370da8a013113053f5983b89ef78549fd16c5e6a17153eb4b9f07ec23e59b9" name="kernel-livepatch-SLE15-SP1_Update_14" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 5101c3b</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 18d701b</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 7599ceb</changelog>
</package>
<package pkgid="404183c41f6c525c02bffddb0a1c452db9712c02e5cca8b24f2ff5cffa8d79e0" name="kernel-livepatch-SLE15-SP1_Update_15" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 00a504d</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 592c03d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 57935fb</changelog>
</package>
<package pkgid="25e933c8d2a6f3f28c5b45dcd6d8d20ea65209b536733dfb6dc2bb0423eee7cb" name="kernel-livepatch-SLE15-SP1_Update_16" arch="src">
  <version epoch="0" ver="8" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 6ff3b29</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9d6dc3d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 32bac67</changelog>
</package>
<package pkgid="4cc01a47e24c9d53c54a446542195cf8d44b868cadf037699add5dc25b04520e" name="kernel-livepatch-SLE15-SP1_Update_17" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b6f5ed2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 5fb4b90</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ffb7a09</changelog>
</package>
<package pkgid="d48fbb0bb7df46df32ffaef7ece2f2f1e88368d69db662b96eb7a1dd011eaad4" name="kernel-livepatch-SLE15-SP1_Update_18" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit cca33e3</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 6381c79</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 8cfc48a</changelog>
</package>
<package pkgid="58406e384e6d4ec54cfc172aaa360f0d46d2bef76dfc9a206d53a4c3cacbc109" name="kernel-livepatch-SLE15-SP1_Update_19" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit b544b47</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 715bd6d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 769ffa1</changelog>
</package>
<package pkgid="a744dadd054a842d38d9a25712cae4d8e87475ffb964bfe59774204db8257156" name="kernel-livepatch-SLE15-SP1_Update_20" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8c16507</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 1bee95a</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 024bb09</changelog>
</package>
<package pkgid="3dabd733db1a17ecf92894acff4ab85588f62ec1301410db76e369b1c4361ee3" name="kernel-livepatch-SLE15-SP1_Update_21" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615809600">- Fix for bsc#1183452 ("system crash on kernfs_kill_sb() as a sysfs superblock's kernfs_super_info-&gt;node list is NULL")
  Live patch for bsc#1183452. Upstream commit 82382acec0c9 ("kernfs: deal
  with kernfs_fill_super() failures").
  KLP: bsc#1183452
  References: bsc#1183452
- commit 931a13b</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 137f755</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 0104b4d</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a08751f</changelog>
</package>
<package pkgid="5043aa244948fcbfd34d1aa96ff7f1894bc8597909b9b6546b844f7a6c5a00dd" name="kernel-livepatch-SLE15-SP1_Update_22" arch="src">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit d19f8a8</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 72286e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 323558f</changelog>
</package>
<package pkgid="7322009b4aba04229366d2281d36977a4fbff15529bb0fe8367788bce6408454" name="kernel-livepatch-SLE15-SP1_Update_23" arch="src">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit d1ff42d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 6c9442e</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 93a6a0e</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit c1edf00</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 47e6f3b</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f5defbb</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit c119098</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 0d95535</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 115d5ac</changelog>
</package>
<package pkgid="05c79d0fa9aca47a2b37e95c78b64cdb41f7f65240174ed2d6a71d00746e745d" name="kernel-livepatch-SLE15-SP1_Update_24" arch="src">
  <version epoch="0" ver="1" rel="3.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- New branch for SLE15-SP1_Update_24
- commit 223f4c1</changelog>
</package>
<package pkgid="149fafca2815a9515294a831527e8b6b6142b2081532fddfa4f974fac97f80a6" name="kernel-livepatch-SLE15-SP1_Update_25" arch="src">
  <version epoch="0" ver="1" rel="3.3.1"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP1_Update_25
- commit c35ae03</changelog>
</package>
<package pkgid="d18cec339bb4ad3fffa56e076e2bac351cd5f335e619aa79fb0cd4f5751bb4c8" name="kernel-livepatch-SLE15-SP2_Update_0" arch="src">
  <version epoch="0" ver="11" rel="5.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a6b0da1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit f6dcdf8</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit a935840</changelog>
</package>
<package pkgid="974ca66e4639f97964edcf31c6167c01ced3c5db861df10f08c96d8ae78e2506" name="kernel-livepatch-SLE15-SP2_Update_1" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8d1296a</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 9a1d6ce</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit b82eaa8</changelog>
</package>
<package pkgid="edeba77c983ddce86f7d1fd51a1feb9da1c94227e63b6eacc32242445120c5b6" name="kernel-livepatch-SLE15-SP2_Update_10" arch="src">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7b4202f</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 54fd9ef</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit bc44fce</changelog>
</package>
<package pkgid="29587ec0f3e2f0b027f56df1a6eae00f4d802a9920ac1ee5029df2a94793e6c0" name="kernel-livepatch-SLE15-SP2_Update_11" arch="src">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7a2dbf5</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 8539f54</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 167b01a</changelog>
</package>
<package pkgid="7d33da120728054b5c20c688614fe1ec6e730ebb9ddcd277b44d5bb33be91191" name="kernel-livepatch-SLE15-SP2_Update_14" arch="src">
  <version epoch="0" ver="1" rel="5.3.2"/>
  <changelog author="mbenes@suse.cz" date="1575288000">- Revert "shadow variables: drop EXPORT_SYMBOL()s"
  This reverts commit ac6cfebd7f831213ebcd4b2690672871572ec49e.
- commit 5771a4b</changelog>
  <changelog author="mbenes@suse.cz" date="1575288001">- Revert "shadow variables: introduce upstream patch"
  This reverts commit e899c4fd3fe7602ebd70f578d8475f1049de7c78.
- commit c1be24c</changelog>
  <changelog author="mbenes@suse.cz" date="1575288002">- Revert "shadow variables: allow for dynamic initialization"
  This reverts commit 843c6fa42429afc1682cdb39119e7a011af2abc9.
- commit 23d37c8</changelog>
  <changelog author="nstange@suse.de" date="1585137600">- scripts: Generate ExclusiveArch in spec file dynamically
  s390x support is slowly being introduced for newly created
  master-livepatch based branches. In order to avoid problems with existing
  branches for e.g. the maintenance team, don't add s390x to the hard-coded
  list of ExclusiveArchs, but let tar-up.sh enable it dynamically depending
  on the codestream in question.
  For now, s390x builds will be enabled on SLE12-SP5, beginning with
  SLE12-SP5_Update_3 onwards.
- commit 27b683d</changelog>
  <changelog author="nstange@suse.de" date="1585569600">- scripts: enable s390x for SLE15-SP2
- commit 933574a</changelog>
  <changelog author="nstange@suse.de" date="1586347200">- scripts: enable s390x for SLE12-SP4
  The initial live patch shall be built on s390x for future SLE12-SP4 kernel
  releases. Make tar-up.sh add s390x to ExclusiveArch from the (not yet
  existing) SLE12-SP4_Update_13 onwards.
- commit f49a99e</changelog>
  <changelog author="mbenes@suse.cz" date="1589889600">- scripts: Disable use of klp-convert
  klp-convert tool was introduced to improve a situation with unexported
  symbols while preparing live patches. However, it is still not stable
  enough and upstream still needs to decide the purpose of the tool. Given
  that it is used only for uname patch and only on SLE15-SP1 it is better
  to just disable it for now.
  At the same, leave the infrastructure in place, because we might use it
  in the future.
- commit 3397b3e</changelog>
  <changelog author="nstange@suse.de" date="1610452800">- scripts/register-patches.sh: stringify klp_funcs' -&gt;old_name
  In order to enable the use of e.g. KLP_SYSCALL_SYM() for the to be
  livepatched function's name in patched_funcs.csv, make register-patches.sh
  wrap the emitted klp_funcs' -&gt;old_name initialization values with
  __stringify() rather than writing string tokens directly.
- commit f54c4d6</changelog>
  <changelog author="nstange@suse.de" date="1610539200">- klp_syscalls.h: fix syscall prototype mismatch on s390x for kernels &gt;= 4.17
  The __SYSCALL_DEFINEx(x, name, ...) macro as defined in
  arch/s390/include/asm/syscall_wrapper.h declares two protoypes for
  a given syscall: __s390x_sys##name() and __se_sys##name(). The former
  symbol is made to be an alias to the latter and the function arguments are
  of the "real" type as specified in the macro invocation whereas the
  latter's argument types are transformed into longs.
  Currently the KLP_SYSCALL_SYM() helper macro from our klp_syscalls.h
  evaluates to the __s390x_sys##name() variant, but its expansion result is
  intended to be used with KLP_SYSCALL_DECLx(), which does the transformation
  of the arguments' types to longs. This results in compilation errors due to
  the syscall prototype declaration from KLP_SYSCALL_DECLx() confliciting
  with the one from __SYSCALL_DEFINEx(), if visible.
  The current behaviour of KLP_SYSCALL_DECLx() should be retained in order
  to keep it working for the compatibility stubs, i.e. with
  KLP_SYSCALL_COMPAT_STUB_SYM(). So fix the issue by making KLP_SYSCALL_SYM()
  to evaluate to the __se_sys##name() variant on 390x for kernel versions &gt;=
  4.17.
- commit 862bd77</changelog>
  <changelog author="nstange@suse.de" date="1622462400">- New branch for SLE15-SP2_Update_14
- commit 700d70e</changelog>
</package>
<package pkgid="09596d5dc9bbfd736f0e66ba2848b6b55956ecfc58765fdce96f1f3e602077fb" name="kernel-livepatch-SLE15-SP2_Update_2" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 880d0b1</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 61c2414</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit c6debee</changelog>
</package>
<package pkgid="96bb63ff2b571d00e5e1eab139edd201d62954d3dd1abb46c5b0e2f1d520d0ed" name="kernel-livepatch-SLE15-SP2_Update_3" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit c98ec22</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit b8c1fb5</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f2e8a3d</changelog>
</package>
<package pkgid="aba396996816f57eeee815e8ac023115f115ee0b38b9eaa29a778553dee6e528" name="kernel-livepatch-SLE15-SP2_Update_4" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit e591599</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d17abe3</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit f31c1f5</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9f7188a</changelog>
</package>
<package pkgid="7002d92fbe9b36161d0a9c1b6521479bf627841cf0514a28dbf9de7d1ecbd25e" name="kernel-livepatch-SLE15-SP2_Update_5" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 2e6b033</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 123d7e0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit ac955c2</changelog>
</package>
<package pkgid="6944bd8b60c2ca7290d781444232a652fd3b92b19006ad912d8b5f99e6ad028a" name="kernel-livepatch-SLE15-SP2_Update_6" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 208fcba</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit d7b8c84</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 9d1f990</changelog>
</package>
<package pkgid="75df218b73f6eb441eeb9f2615d27fb2952b6be07cd840703f7c6a301ef89b26" name="kernel-livepatch-SLE15-SP2_Update_7" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 8b05df2</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit c2500d6</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit aedb4b1</changelog>
</package>
<package pkgid="9046610da3a778a720f8ca5736bd0b232c7442c061c46772331c52b13e89b733" name="kernel-livepatch-SLE15-SP2_Update_8" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 45e9664</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit ba12697</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 75d24a2</changelog>
</package>
<package pkgid="f112ebe809054cff61663c55490afd9e10564e1b13393b7e87d48da023516375" name="kernel-livepatch-SLE15-SP2_Update_9" arch="src">
  <version epoch="0" ver="6" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit b4f6af3</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit 0c5be31</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 473d04c</changelog>
  <changelog author="nstange@suse.de" date="1617796800">- Fix for CVE-2021-28660 ("memory overwrite in rtl8188eu")
  Live patch for CVE-2021-28660. Upstream commit 74b6b20df8cf ("staging:
  rtl8188eu: prevent -&gt;ssid overflow in rtw_wx_set_scan()").
  KLP: CVE-2021-28660
  References: bsc#1183658 CVE-2021-28660
- commit 0677567</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 403daf6</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 14ecd8c</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit 346cb03</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 72307e8</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2ae8130</changelog>
</package>
<package pkgid="30a334b6ac45a3c8ba28259d6f7d813e0fe4116aaeda62d59fd8aa6b84e9b84b" name="kernel-livepatch-SLE15_Update_18" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 7413ea5</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 3837119</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 92004f1</changelog>
</package>
<package pkgid="510296818a98a624324129c5079ff15e49295aa8cf98b97dd844dffa4014c986" name="kernel-livepatch-SLE15_Update_19" arch="src">
  <version epoch="0" ver="10" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit a813e31</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit e1d2cd0</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 29a78ae</changelog>
</package>
<package pkgid="fcda61658dc3bd637ccda9a1f43df730804a6edcaf273b073fa91bfeb92407ad" name="kernel-livepatch-SLE15_Update_20" arch="src">
  <version epoch="0" ver="9" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit caac1ef</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 76f7559</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 4b51702</changelog>
</package>
<package pkgid="3b49834e9b25f8349b48a48b831f9e94f29f4c4d31650dfded6428236fa329be" name="kernel-livepatch-SLE15_Update_21" arch="src">
  <version epoch="0" ver="7" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 1dc2d12</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 160d316</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit f42a313</changelog>
</package>
<package pkgid="682b2005d4b5904ecf272d28b64fb65ad78e2ad6d73633fb5db4374e43d49732" name="kernel-livepatch-SLE15_Update_22" arch="src">
  <version epoch="0" ver="5" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-26930 ("error handling issues in blkback's grant mapping (XSA-365 v3)")
  Live patch for CVE-2021-26931, CVE-2021-26930 and CVE-2021-28688. Upstream
  commits
- 5a264285ed1c ("xen-blkback: don't "handle" error by BUG()")
- 871997bc9e42 ("xen-blkback: fix error handling in xen_blkbk_map()") and
- a846738f8c37 ("xen-blkback: don't leak persistent grants from
  xen_blkbk_map()").
  KLP: CVE-2021-26931 CVE-2021-26930 CVE-2021-28688
  References: bsc#1182294 CVE-2021-26931 CVE-2021-26930 CVE-2021-28688 XSA-362 XSA-365 XSA-371
- commit 7945da5</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 51cfc0f</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit 2bdb09e</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 2e3bf8a</changelog>
</package>
<package pkgid="bc116ba8c43ca799adf4a766b68b38ee5dee9ef5bd7441b86679d717f60de5ce" name="kernel-livepatch-SLE15_Update_23" arch="src">
  <version epoch="0" ver="4" rel="2.2"/>
  <changelog author="nstange@suse.de" date="1615291200">- Fix for CVE-2021-27363 + CVE-2021-27364 ("show_transport_handle() shows iSCSI transport handle to non-root users")
  Live patch for CVE-2021-27363 and CVE-2021-27364. Upstream commit
  688e8128b7a9 ("scsi: iscsi: Restrict sessions and handles to admin
  capabilities").
  KLP: CVE-2021-27363 CVE-2021-27364
  References: bsc#1183120 CVE-2021-27363 CVE-2021-27364
- commit 466ee5d</changelog>
  <changelog author="nstange@suse.de" date="1615377600">- Fix for CVE-2021-28688 ("blkback driver may leak persistent grants (XSA-371)")
  Live patch for CVE-2021-28688. Upstream commit a846738f8c37 ("xen-blkback: don't leak persistent grants from xen_blkbk_map()").
  KLP: CVE-2021-28688
  References: bsc#1182294 CVE-2021-28688 XSA-371
- commit 86a5867</changelog>
  <changelog author="nstange@suse.de" date="1615896000">- Fix for CVE-2021-27365 ("iscsi_host_get_param() allows sysfs params larger than 4k")
  Live patch for CVE-2021-27365. Upstream commits ec98ea7070e9 ("scsi: iscsi:
  Ensure sysfs attributes are limited to PAGE_SIZE") and f9dbdf97a5bd ("scsi:
  iscsi: Verify lengths on passthrough PDUs").
  KLP: CVE-2021-27365
  References: bsc#1183491 CVE-2021-27365
- commit d239402</changelog>
  <changelog author="nstange@suse.de" date="1616155200">- Bump up the version number in spec file
- commit 9621885</changelog>
  <changelog author="nstange@suse.de" date="1617969600">- Fix for CVE-2021-3444 ("Linux kernel bpf verifier incorrect mod32 truncation")
  Live patch for CVE-2021-3444. Upstream commits
- f6b1b3bf0d5f ("bpf: fix subprog verifier bypass by div/mod by 0
    exception"),
- e88b2c6e5a4d ("bpf: Fix 32 bit src register truncation on div/mod") and
- 9b00f1b78809 ("bpf: Fix truncation handling for mod32 dst reg wrt zero").
  KLP: CVE-2021-3444
  References: bsc#1184171 CVE-2021-3444
- commit 54aca3a</changelog>
  <changelog author="nstange@suse.de" date="1618920000">- Bump up the version number in spec file
- commit bab4d29</changelog>
  <changelog author="nstange@suse.de" date="1619092800">- Fix for CVE-2021-29154 ("LPE due to incorrect BPF JIT branch displacement computation")
  Live patch for CVE-2021-29154. Upstream commit e4d4d456436b ("bpf, x86:
  Validate computation of branch displacements for x86-64").
  KLP: CVE-2021-29154
  References: bsc#1184710 CVE-2021-29154
- commit fcae8cf</changelog>
  <changelog author="nstange@suse.de" date="1619524800">- Fix for CVE-2020-0433 ("use after free in blk_mq_queue_tag_busy_iter of blk-mq-tag.c")
  Live patch for CVE-2020-0433. Upstream commits
  - f5bbbbe4d635 ("blk-mq: sync the update nr_hw_queues with
    blk_mq_queue_tag_busy_iter"),
  - 530ca2c9bd69 ("blk-mq: Allow blocking queue tag iter callbacks") and
  - a9a808084d6a ("block: Remove the synchronize_rcu() call from
    __blk_mq_update_nr_hw_queues()").
  KLP: CVE-2020-0433
  References: bsc#1178066 CVE-2020-0433
- commit 025f129</changelog>
  <changelog author="nstange@suse.de" date="1619697600">- Fix for CVE-2020-36322 ("FUSE driver can confuse kernel by changing inode type")
  Live patch for CVE-2020-36322. Upstream commits 5d069dbe8aaf ("fuse: fix
  bad inode") and 775c5033a0d1 ("fuse: fix live lock in fuse_iget()").
  KLP: CVE-2020-36322
  References: bsc#1184952 CVE-2020-36322
- commit 1190635</changelog>
  <changelog author="nstange@suse.de" date="1620907200">- Bump up the version number in spec file
- commit 038c1fa</changelog>
</package>
<package pkgid="dfa7c811be5ff1f46231e5e01cee30a5c101f9cbe1f978f2135ef6b9a83070e4" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ed28ff851348d45a2f1bb900dfd09e3ba197cb1e84b2539193196216b17ff3d0" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="f36da0c72174ebabcf0c8fd3291812295263f4f9515ce46fcca35c7b4610b9e2" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="bdf22b28bf6fc671dd36781aeb53e2f19ab6fc9dfc362d14bc204f07745e2c1b" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d959149d5d01a7fae06cdf24b9c9c5af979b14bbd1fb07e5c129a5b84c7c6194" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1c3da275a19640c63b6c743f1a510e6d72bb30659042273ef189647730b6e4f9" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f7897de6edca72b04467e2cf35d8015d7a46633f3c319b4e23c1a72ae8c62f30" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="daa75327aff4d1b498d2c4292142ec836aede0789d3fe30daa1bd50d2ec0c16a" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="0a01e900aa31b62467eda96ccf7fbfea16def89729b17cb2365545142442e902" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="5f1c5549a733d8e62327f621178afc8c0e28152ba2dfb8f8da3e064c06dc3d5c" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="cd9671ee03ae6b2422b4fef95500d6ed2d1b13cc92b44164fdee96790d1fb4d0" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a4b7eeee0ff1ef8afcadc9f2aed98af66cf55184c657843ac51a05e1ed6aaf2b" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="c2355d0c6ab2780cbb00d1fa17de2618febbab294df96b872a144aa6ce0a6ee6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="831e2884c3e841ca76650eaf95c31c3c2cf3585d2b9706ff89dd87f0851355c6" name="kernel-obs-build" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9c805952c16091e638bbe92d01ae43264a3999019af6d74cfcf383885cee7cf6" name="kernel-obs-build" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="796385ccea0c245781afdf9ffa91859753632a83463a90a3506710feb2aaded3" name="kernel-obs-build" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="d7f07f8a54a89ce38d4b613dd944204e4e845f8cd764155a9590396efe3225e1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7695b6ace6c18f74eb1c0bc0a6379bea940a6bdc055be10b6dc416590b12687e" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="b2a4cbcc5bdc6d171689c56956b83c5a7c73ce77006daa07ba0e0cb2356359a9" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="66aa435f9722f0bb83ea7ffa9cb4f593fcd6dd7d4d08bdef73c9f083958c0cdf" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e97314795bd574188944ef73ba40935da7494402ef7d8fc7e8c71d9b8b6781d4" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f44545d984818865f5506a486d42f95f78cf4f72e4fbb0180a740d1f62694b9f" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3a95090516a239d5c3de30b45354d0977b6836b344cfd5d6d26c7372e85405ba" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="c524fc1cea3396f39e0c83381efd3859ccdd24ef349ca2579187f875dcd08eed" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="613a15f66ea3e103e21aa0f885f60e56c50774d408fdc4ea4b9c3c1d5b9a8e69" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="ae426d39b246bc6a99ba4e15898b3899fadebdc605e0606b8eb48d6672b4f12b" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="3a652786378244b160b7021d514963fa0298ec7ac84bdb35033d955e154efd53" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="885722b43eee86aa46ed4a74f82d729d7b0f7c003f61d1f427159f8048e64089" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="9189953b00607839962baea20b21d5e69e2b5d178e13311cf64be287ad97f043" name="kernel-obs-qa" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="a5cad050c39691fec27ed99daade7c31b900a1daff1d4a79451d2c7b26a2bf98" name="kernel-obs-qa" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="1048dd39cf164036ede2667cfb41fc30b6d16899e850b46e7c0a6a13c1c02dfc" name="kernel-obs-qa" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="b9680170a77e08936e67463c2bee99ed83334ffa798f85572dae17d4f2a7f444" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="bdc58d571e6da218c6a27f959c9f9ada3ca4d10345af6ba3537a9be8a62554e9" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="fa1fed800385feeef20826d487f219faf246c604c72380348fcc300306a36ba5" name="kernel-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="de526c42aa2ee613cf7eaccc2c92732a07d7c69e36e5ab534877fdb91bdc3289" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="c9b450329f137748d3122c104e1b7aaa06ccb16cb30b3a6cf098e234ed16f396" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="05cf7e9ae851b1187be573a9708d26ba572ca1da0da6bb908409478359584a52" name="kernel-preempt-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="f9a4d40e969a115dcdc09ba494c22bc1be1ffc8e9a86c3ab7a103bf64a330996" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="585d13e90f6b8c08b71b71921710bd60622683a21e61e792113b0ed82e14404a" name="kernel-preempt-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5cae09cc2c9d0f98aeba489aa929dd551cc45f4ddb1eb63f180947e2bf725b96" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="f961a1230ad5f7f79d021632bdf9a8fb00cf1a2033e52fe3b0e3ea767f3de05e" name="kernel-preempt-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="841a6e789eacc2d7e8bc2b4011a380d0110cbc01d7d12dff3014b29e998d0912" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9fad17f2fc88c4ca361c45813e4eb906827973a8c89e68997ff69b1a7ed85334" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="a7d52a51292ddb456d54f5e566f3a3adc4e87905548c67b97630e847e49b06d1" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="a9b78743574b133a3aea5a2929f1524ff99c5ea4a7d683b9a170e2ff4ad20465" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="1058442aceb4a2d82127eb73afa44ef673cfeb6684340f9de7473bd95a5d8952" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="db4a1f00ef7753db6d5eafcbf70d06f131660432cd62833fc4acfa63a9dffeba" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="5eb21798337b0e153c767259a0fc0b8848f61beb34337c2ede5a5ac89d82fa82" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="6043f39fd6c2e454b4566bad55c5753afe5808cabae7a2ca8af52be97901ed09" name="kernel-rt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="6e4e7cbc35b3f3a1225194ef72820c8f82e97059aa84ac5c96b73bafc8fb6128" name="kernel-rt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="48265492f701eb4d9c999779e59bad9adf0c09abbb6698036d35d51416ff4621" name="kernel-rt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="0378addcf6c84c9e268197df264df80de3116541b8ce48cf3b9972ccde6546a7" name="kernel-rt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="38fbbea11d0c38cbbd9ada17ea0b81fe2f3f8c5fd4927b0faef295c348653b98" name="kernel-rt_debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="5b726ab546997474793d8b98320e698b2b2edb16692d2a3b7fa98693bbe494c2" name="kernel-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="162803facac93578755a088d2d305da23672979ad90b75d92813757af5d67bba" name="kernel-rt_debug" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="4e5bd621c5057477b72c334e63201b9242da458151a4e788806fd029aaa70bcd" name="kernel-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="c94ae92536cfb078007dea6c000816eef01e0ee68911f4efad7a377c0c01ddc7" name="kernel-rt_debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="cdda358127a8a9e036d3486f86cc09ade0d77ff76873ecd05ba23f1fc618212a" name="kernel-rt_debug-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="76beedb928b5cf01b53b376219ecac431aa84f6209d38344db8a72c972882653" name="kernel-rt_debug-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="16cb47a5a46c01bb86e8c3ca831278387eafac10991ef94dc21beef419e54d98" name="kernel-rt_debug-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="89c4f15ca50c09587a9b1cdd8561030a138f4d76f7abe7cacbd2c7fe80e37d5e" name="kernel-rt_debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="cd5f9801d00e624c8d22c0fdddf7f95d25d20cf9d23ca23edb3a6f37389e5e1e" name="kernel-rt_debug-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="64b91ea63858954b55a6caa6b4e67c8de7296d0e60c1e91a67697dfe7788927b" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1b2a2f78cd9d2e0e693efca3440ec9ce091718cca8bb244466042b0147a6468b" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="407586284d146b4f4b890eb207ff437d56e517a81871a9c4934a714246932f34" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6895eca2a2b1ac22b26ee20f55d17461f0e042f17af7fb88519d1bec7980d88e" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="3f029f4a887aa33db058146ab9dbeb40cbdcc71b1dd567e35f8aa7fc99371326" name="kernel-source" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="685f33cbf9e5dca684aad79d2ba195cf4ef2624b88c3d1f2a2145c51bbe344b4" name="kernel-source" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="ec1312407a75a1bf29b66f344ffafeb8f4fec70f43ae6ffc99ed84f86098d4f5" name="kernel-source-azure" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="c0bffbce71a38693038c5ab9f68de8ae8625e4bded02c9c1855206606cd3a2ed" name="kernel-source-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7fcc04eee11f46aee509b363e592d6fa7500096811ea9788ebd720dd99636c4f" name="kernel-source-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="b5b307119c05f85da87a34461b6dd3730188e74e2189423cf9c10e7b5a25bde7" name="kernel-source-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="8394507deabf0a54679f527849691067b665d8bb3c53b14b34de85a4c1952185" name="kernel-source-rt" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="4cc2447ac0db397a5729a6a1109b492d31eecffd5c02bea04e7ea2f13ae95eec" name="kernel-source-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="aa1ccdfe33f2c3048fb8948de3f91448cda3beab19cc41c284cd850258658a43" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="7125d6b2ad1c253f2f919c14641a849ad07756cbfd6ac4db11507333b9cc3b1f" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="07a0a497ed684350f99356cdb713182af3b700785fa511a32421fe05b434d85a" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="24.67.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9abb567af2885c7f74fb1b96e6516005292b1b2920ae3d02cd9769a1060fcaa3" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="771dcfc8653d05363baf924f72354b30d60abc2a64af94824192859306c6caa5" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="53bc2504e77d35f2c9fafee6c0a60964997e1c61a7692ad2cac9dc7ecadccf88" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="fe4f11ec6d995e255297689b8a08986c30cff78a2b9ef276000f0b41dacf4170" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8bc91ae9087c7bd94efd75844ba41efa1e052678f60fc96c67f243f0b2c28191" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="7f6f5f8633a35e734da7894b574915e12cc519aa6a5ccbbc9a76c07e6538ed01" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="42075abd40057f9a4e6306c174cee5e825ce580a4bfb5702479b19a7f1b8aa91" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6aeafba8a7de3718fa9fccb2e69568b5fed8892656715c9d61a5f3d9dce266ab" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="42bc1ef6dd728c537b700ca3cc90fdb2b897ab730fb48be27b9d1ebcc8e978ef" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="7eb42b8a588d4f40a08e1778e00316d11f5121c3a64887f3f02abe8f2aa55dee" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="956ba895ae6f8327249dcb6f0a4ccbd69d543334f31c055926beb3f380a58276" name="kernel-syms" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="ef442518dfd2d3401b983e2aab0d6fc4ce544738c85331657b9e75162c48a34e" name="kernel-syms" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="355b9723e651ec6c7477ae6e28602df6a83c1bead86c5f31fd3fe0a3da28fa87" name="kernel-syms" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="ed4e3817aa9e34be4257039c0da49e693170f6664d028427ee980cd52b85297a" name="kernel-syms" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="a9d869e12ff0cfd77a347009c0012af0b84520fb9479b7d8722ac98a63b8f4c8" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="0a0685fa3b023f8ec4b3987fab5d6bb0fd7f29d7f32d507368dc1cdf99fdf3cc" name="kernel-syms-azure" arch="src">
  <version epoch="0" ver="5.3.18" rel="18.50.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="de144e453879747ab165ac1c05274a0fc1dcd92d332d805dbfd798257816b4fb" name="kernel-syms-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.1"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="3d26870eda1134b5c6e962233d62e791c98b6143483ec9de6d88309098029b09" name="kernel-syms-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="db527d119ecb05d0cb4a30ce17e9add0cb5297b9b362d8d3aaaa26220c636494" name="kernel-syms-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="2c8f9a247620b41538f76b9ab8c9f50f8f6d6b89b94332e4020f38ed2b9618a8" name="kernel-syms-rt" arch="src">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="d96eceb02ee26fbb6cc17cb30b56595dbbb8f9eef59485558bc3294916a0a0bf" name="kernel-syms-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="be7d61e7e2ff2a9e8b691eec478ecf3e714f8d3dd8a23cf25f1fb1f653f17f77" name="kernel-vanilla" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="1568e1e8095a4a49661920ebbbecef0eca3064c3fda8ee8028456881d8656002" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bf0211db72c3ca7e9454faee9ada24bf80d83979362ea5f49470d92bc7a16a2e" name="kernel-vanilla" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="ae83df43100fd0a41b787b693f05823e213321f61547caf2409a7e6981f84adf" name="kernel-vanilla" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="510cd77a7792f0c2d87abb7ca55b1345e03e30436bfbdc445a01da121e49bf43" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="21c1bfa2c8cf01f3273f6b9aa90f8fadf3ed84eb15f7e94ac1acdae05de411c6" name="kernel-vanilla" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="24cb742b904963932bc2acf90a792a91d3118a9b376031946a84590f2258b603" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="98510479785a85957cf8c3bfbf4102e0345f347207c1c4020cd217861265708c" name="kernel-vanilla" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="fcc81af3af123f170d8d46314d24c92173a10732cc6c59bb84ca1d4a42bbc6c3" name="kernel-vanilla" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="8f36eb2c8f6cdf5b0f689268c64b4aae6dc959fb5afaccebc6b47238b544b07c" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="212cf8a91ff8aa1765821b485a752e349a3db2d20812131b9bc826152c5e9a40" name="kernel-vanilla-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="05b9af246b7d0707b6c0d2f5b6379548cf0c1a5a954d8c07f0b974356f75bf33" name="kernel-vanilla-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="226977201606481dc4ce2cecaa6072409b8d9cf18ba18c79be6ec77c55b0d3f2" name="kernel-vanilla-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="914a32264e41ed7a3316787ee8d10a3f5c39b88b01b67c4b31d98c6a072cf1cb" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2a7f1ca4581f10f1e0557654aa9799b901e6f85707c390a8c6276f911b9ad3dd" name="kernel-vanilla-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="854b24a98f92a7d6067bc0a0723426c5cf10cddb5deec967c49873e8b17b2045" name="kernel-vanilla-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="3b1f9bc8b67277dcfda515320528094ac9d490317ceafafced834ca673c12f77" name="kernel-vanilla-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="237a966070dc34ff43dc402ae68af848b61f78a256875089df17f55351c3ca2d" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="b00597432b5fa104ab16ad71ed3b13b47b360a29047f914b944f07c64b2ae266" name="kernel-vanilla-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="95dc814e0e5df8e31e2ce2b532a2ec8c43dd6f7f7cc51ac57c5939070096dffe" name="kernel-vanilla-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d3caaf77c3e70a45886a537720daddbd124a9dfc4fdedf21cc089d2aeae24be2" name="kernel-vanilla-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="137d3781a704b7bdb7d19bcdd24d747b233453c05f949e2aa5ba6939b6750799" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="e76083fcb3a35c0af6dbacfe2dd7b1f6374552967add925c94b58cc63d7f6975" name="kernel-vanilla-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a8899890f4702cdabaf7dce1edd4742c34e987a3a6ac51486e846d41cf03e253" name="kernel-vanilla-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a7f99a1dafeb74acef8c111154ce3393f31581ab095cbe77bc8ebdb54f56bbd3" name="kernel-vanilla-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="67e00f9cbc942e2f49f7b4b07dd09f05f84f3c155dbedf80dc143189aed1b655" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6ce258857935dccff0ec336e67183a2b8cb673cafe90f8136df48decdcac68fc" name="kernel-vanilla-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="d5bad1fbb82e3a4e876112c92088e3980871e3bb31fd85498df3a1fbf8bb8540" name="kernel-vanilla-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="baaff5f35dc9d5fc8a92b969c590ec872be11c89c6c6bbb752ff9652fa21fff8" name="kernel-vanilla-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="722f8e9db9e8283049d184be9a8664a4e3fd3fa3b6158a31b357e302c54f4716" name="kernel-vanilla-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="76ad3397c051ca2a632e655c1e3544b168f2e381ba3b0fc924822a523cb9c7c4" name="kernel-vanilla-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="fb61db97f568fd69d149507d516e182be5d2059e9118981a3468df916614e375" name="kernel-vanilla-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="2d339b550c474e075c44f0e21037a782396d1f50eb479fb4f6aea0ff9e51f2e4" name="kernel-vanilla-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="371e7c100dd53c8095f86721d71286a12671a7e41f3d266114c11e022574ad86" name="kernel-vanilla-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="b7d5180ff4aefd2b730cbdcfc145f70163091fd89ca62946a204e7720c419bc2" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="772dac665ce47fb1f712d823b3935cec26dd3d30fcc19aebc3184301f5069899" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9012e3861688f14f45f23cde5c7df56112d052752a50aac92b2edfbe185ba72c" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="7bffa11727bdf55737e6d9704d520e7ce3e86b4a8e108e29884becbada8242b4" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="47fc912e04a3033113b30cf611efbf2806169d57ed7354e4264923b2bf79e801" name="kernel-zfcpdump" arch="src">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="d78dd826927e3e07c0bf1a861f4b3675cd606c65349c797e0e7d7d127703d142" name="kernel-zfcpdump" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="23cf40290d2b37e627c75b64e4806ea282b863621c9b932206f8a37229198cc9" name="kernel-zfcpdump-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f3c50bc63c1a5c29f51a6f0b892c80b16e4242fdfbf3af0e0b8f021e8503fb43" name="kernel-zfcpdump-man" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="6c674b6ba1acab5e25055476d31198211cec971dff96bb803394d858fb9de0ea" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9c607635678b856ca23b5c5c2f223abc643c591533532a3084439ef65e8b4e96" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="ba6ef058891b90fdab771b820ec134ee31412b5fa0053a8af95ecb2a619125b2" name="kglobalaccel-devel" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="6cb0a4ff8fc69f0dd9665defa3a34b0705f8c4a1c146cc67d5e5d7772fdd31bf" name="kglobalaccel-devel" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="5b019c45ec329e35568722ddf5058fe09d752b5a08e96eac1f39fcfc77136cb6" name="kglobalaccel-devel" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="26191b2b8dbfe2e1a735285a5eb5b286f1b80fe81ecbf02917d57912abb97b53" name="kglobalaccel-devel" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="3a306452f2b82d3ef8c05d841ab85ebcb43152f53dd0a07e3b90f0f8fa969f56" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="b0b19ac1590b7a348023b19edc02d4a23fee3777062edb297f594f4249730b6c" name="kglobalaccel-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="c2add3970e64219deb4dedc87b8b8b0867ad1d09b4e253e54e44176161f40e73" name="kglobalaccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="1372798fa047c2429cb56c2bea963ad6a82fb55481b758fa99bd710758e9d776" name="kglobalaccel5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="f74f56585dac7165698e2617c7eafa96e2db3c41bda2ad1b6cccd6b48115be12" name="kglobalaccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="84d1631237bb14989fa6ae8cc5688a169e8258e1ec99d6acb175738803093501" name="kglobalaccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="91f5c32433eca6c191c4c47ce6c98ebc68d15e626a24bb8d050de8a98252ea67" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9031a85f217869cc53e90c0981c51b6fa8b428817943125503b8e4056484f851" name="kiwi-man-pages" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b74d4b6d6a6a972ac4b218abc18d135ac5936efa1305465b79a7e261a5101138" name="kiwi-man-pages" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="bee0a9d4980f2f1839eb79e02f084cf6ab4c7ed1f5a5b4a1bc9e2332824d2229" name="kiwi-man-pages" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="76eaa4ec7f5aa82b951960e293a7dca6e188712a1efe92117af5dadbbbd9dd17" name="kiwi-man-pages" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f00a9380855e825cec8db075565b2f0f0a64777500bd3b5cfe3496c4708b6925" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a447e13e5cb276b65036b830f799ef406b7ebab24a41776a276cc607b5964a92" name="kiwi-pxeboot" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c74de3751b5a600f30c481e190b95ecc4fc7215941e528270231d0ffba223e9a" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="c95a09d702c82c028f526661ca00efd4fc40c8bd06d342b1224efbcbb6f28ddf" name="kiwi-systemdeps" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="166e2b4604d8d2a6ba1423b7584b2286ad790638ad0564122a552787246428d3" name="kiwi-systemdeps" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="104ec80c6924e6fa19fda0d6c7e0d8312b9eb024025424b3a83a1cfe32402a8e" name="kiwi-systemdeps" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="05d78523d7e0e196c433d7f0a66fb771bea1c3e543ce30d5e2228a2f7a2cf10a" name="kiwi-systemdeps" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a3f52adfa14898bc3bd819a13f47a45930973cc5270fc6c68b15c6c725afc4d3" name="kiwi-systemdeps" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="557b6885e59c0630e4850deef640322644a9581610bc91eee3de20050415fc4d" name="kiwi-systemdeps-bootloaders" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4d5be9136b80de15b2dc9b78074819b6958e18ab293bb701919808fd961f3728" name="kiwi-systemdeps-bootloaders" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="65bec4085817a11abfed1d5b1bf38a6fa89355a3d06df056e7267dec4bd50001" name="kiwi-systemdeps-bootloaders" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4f8a0d7e73b4788d893f084fd24c1b76295dcb9cdc2c5bb7f346da4131d1ef9a" name="kiwi-systemdeps-bootloaders" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="04529da86ba6503881090fc638768aea4647a2ff79a9e79160a977ed07965ae3" name="kiwi-systemdeps-bootloaders" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="35a20c04a938dc164f153943a0d3771a54524fc5cae7a0ea34a46ebb90267749" name="kiwi-systemdeps-containers" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="854663bbce996cd0b97e796161b1c91332c3a3fa1036391ee281fc8ea7138371" name="kiwi-systemdeps-containers" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7dd2a1e6ee3d596323af4162e974cd08228ca744e22ed3c191b3bcaa38161d1a" name="kiwi-systemdeps-containers" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2a3ce448c711c9c4373638abb4a1191d13f0d772f3b3acc18d93489eae1287cf" name="kiwi-systemdeps-containers" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b5a29efb9c4378395e4a545284763bf979349f9b88484a0795547b7696394c26" name="kiwi-systemdeps-containers" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a6d35d3c77d04001eb492e01055bc19bf305d949c5f9de80fe80565745069252" name="kiwi-systemdeps-core" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="165a56b5a3a4cb4c0dc1b3cfd6d783617330996cf85ad6f0d6c94a7195d459b3" name="kiwi-systemdeps-core" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="700eded5cabd0020c42ebfa38fd0ccc469ffca6375211973e4271792f727103d" name="kiwi-systemdeps-core" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4fa82cbdb18b6e28eebe3fe385d67b644ba6a3a9cb830803ac2fc24496606b29" name="kiwi-systemdeps-core" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f096b8bd7766ed4f1e5c71e1ec344f79d406f227daa86388f7171eddca5e63e3" name="kiwi-systemdeps-core" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="38632790c64e768302cfd34110a64b93a6065393df30b2baec72ab058ce28f0a" name="kiwi-systemdeps-disk-images" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="2de78aace414dcb87e920848cf28ed0a9c0b06501ffd1961794765e6c5da605b" name="kiwi-systemdeps-disk-images" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="63869906caf472f5fee2925d1db3a4b74f98a236a2c4f3c6337cc719d36ca789" name="kiwi-systemdeps-disk-images" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a0f9febae20fe5374b3fc59704660b9768cb8af9855b14abcf6091b678cd32c8" name="kiwi-systemdeps-disk-images" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="0d5d1d44200431a24813766f221ad6452a9766b7e582a2434c8e95ddc9ab48d2" name="kiwi-systemdeps-disk-images" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7290c475c27575f3160554f6ecb447f9afe3f8e3b1cfb19e8e34a32c42dbeaf8" name="kiwi-systemdeps-filesystems" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="fe402b328c9dca06159c4982ec501e23aa5060b4d7b6336a5c08d3bcb7ee9572" name="kiwi-systemdeps-filesystems" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="70d7790900921fa3a2be1280a133c07ccef290731c11b34866c6b5ef02df321b" name="kiwi-systemdeps-filesystems" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4300885b2c94658d7bdca890e87e3a63a1e79d1b81ec52413d0ca0e0cb74c771" name="kiwi-systemdeps-filesystems" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8d21b0fe6e240a66f9377fca25eb71d7a91a90db1f22b9fa20be65d9f3567dc0" name="kiwi-systemdeps-filesystems" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e6e63659386835fa5400bedd8c3d458877e62649e72e7b01c54308a69124d5ea" name="kiwi-systemdeps-image-validation" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="7785827d36f95276b1700b09fa342ca33f7a8cfd776005fb2c7d9397db0aa8a3" name="kiwi-systemdeps-image-validation" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="fb32a6c92087dfa21b7d67eb036eee6a772b8ccfc98dca34b673436fe04b919a" name="kiwi-systemdeps-image-validation" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="209f06c06701089ee6e85e87f941ee6d6c1a2b9dbb956e584faddd254b198e5b" name="kiwi-systemdeps-image-validation" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="082e1396f66fca2ccd2c47b02d77985936bfe834ac9c39dbec16f36049c324a3" name="kiwi-systemdeps-image-validation" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="b348649cf430aac224eb3c83d8ae56f35bc427c0f511b97924d9966e11274053" name="kiwi-systemdeps-iso-media" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="76e09ac664824f595ec11b962ba140c275ff6cbdadd7577eb2398706aeee0824" name="kiwi-systemdeps-iso-media" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="4921127c288ad5a3b64ea785bce8a70952b697cea4218df02c00d89a2dd74320" name="kiwi-systemdeps-iso-media" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="6b6328dec44d2da93e59e36386a35e30869527a3ea79073d37d9ab4681f4f79e" name="kiwi-systemdeps-iso-media" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="9fe99c1f1d24a20b20f74e21a2b1423a7cd4b58e0093d2144db9fb7d9117a457" name="kiwi-systemdeps-iso-media" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="188c06ec54f79ab8fde834dd90367ff299a1683f797396948f70235e126a1e7c" name="kiwi-tools" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="d5ab485bd83b833c0cc9d3eb786b53d5ef74081efdd422cc32dbeff280cfc62c" name="kiwi-tools" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="552bffeeea1ab33f03c2e395a63b4b356201d382b558062fd661f122657da5b0" name="kiwi-tools" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="8a7036dc010ea4e846786b49a734a49722b6f3975d5121ca6fe313941202d2d8" name="kiwi-tools" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5ac128f9e09addb42931291c340de8b7d644838631cdc12c298ba79fda8c853c" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="e99e13217932495279c02cea6a5c555c039391d86da6603a2f785f7397b54a35" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="71443bb8606f2c846c6befe7976d63c2aae338e571c2dd5ee94beead62ffff9b" name="kpartx" arch="i586">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="5640fdd513475cad5b41af6a1d09d41f77e1dadbe16ebd237d6bf50facae8572" name="kpartx" arch="ppc64le">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="73574719555326e35a7fa6228251494386a49cc7c045e772ee6cec371922e095" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="7c39e40897bc3ca1e8e6211ed2428c323615b7ca1e89d89bf2e92377ac236199" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="5555e460b053e78df3b2714709996e18597e3924c831c3e3bac463286baa1cce" name="kselftests-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5d063c50151ab4e1c12de7220d1d63494d75f195e31cbd52b69927ebdd3f3f90" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="9f488464e94fc7fa220f02994b904c3bf12536b3612dd9cac4c46460fed107ee" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="2b9c5a9975fc17b585929a6b3fe1c3d9ef421820705e1dcdcbb2cf9bf396fe6d" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bcb92d93c5d6c3307e11a74573abedf70abf6693d8393d7db8824f62235f5b0e" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="140fa79f48a203d851daa6d5ebd03da61dd4f564a42e411567d8293d104c8bca" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="399dc9dc733254e1cd47fe38870c3db879d46b591a98ec75eea943e318df70ba" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="a367ac12b5f064c56c8cff05f1da4971b9e05ce08f74ea8eb24c412a66307f95" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="173f61b3cbeef9139cb937c0f8710d970a62c11f66cc8af157e28dc27be8db3e" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="c3a2e0414fee6d4c9cd81a60d166bb9eb6cda4bceb2b754a4ac88f0459a14b0b" name="kselftests-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="51168263418e962c0d822cb39f81ba226b36e8b4bcd8fd6ae62684847e6abd8d" name="kselftests-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="ef3470f7b0e99063409e23210382947109e9c470b5a86518285fcf0fdc8a68f5" name="kselftests-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="67ea0e9165b955978c9f300b822e8e4b47fd52474667b2163e2f01c220097dae" name="kselftests-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="d60019e77305e9801bec665db0b4fd50f2e47f0eca8299fc834323d7d92dd908" name="kselftests-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="2a093cea165d890398750e4df3e15b0567873ba791e3702e2a2eb8e3342c96ce" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="1597104025c6f56e9ad09683b0b688e5e3abb9798475023d5f9b2dc6443e2470" name="kselftests-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="b47d133312620c19977aa59c19641215d7436a4841492a4d76ab719ff1cd6877" name="kselftests-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="cd0baa5235ecf8c618fd6ce5751d12e845c466d54bc65849db9b5c65537f9a90" name="kselftests-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="f45eba6b3b6c94dc532b4cb48eacf2f37ddb2dc88d9a911c881ee399ed0e3b12" name="kselftests-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="1e5af676aab6c1e60aa598dc001d42653de89964a2eef1db487ba4b7d880812e" name="ldirectord" arch="aarch64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="2d668b86ff9ace7aec0b46aae7109b4354e9929b2bcb308f05095152be986955" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="33165c963ac4cb0793877e18e04704bf5ba0c3198726f65f5300441509f8f51a" name="ldirectord" arch="ppc64le">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="a56533037a660d90a9890f46ade7882026bd55abacaab3783c6502175553d3cf" name="ldirectord" arch="s390x">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="b622b164f71b383725fe837060717775a3b51c3d3170a696ade5fe5f3d86fc52" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="b220acf8b1a42f4c32364ce9f5a6357cbbe6afc0efbda2347d4b40ce75e26d68" name="ldirectord" arch="aarch64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="2b6093f83b7134e7363a32f97d194f8a70ee5a73b37a765b27e4021487713f80" name="ldirectord" arch="i586">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="e9a5cdadf7b4a683aa469436c1d57ffc13672f17d1e5042618ff794fdf1f4469" name="ldirectord" arch="ppc64le">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="72ffe86f8986e0c5603469e070cab1c27ca7da78b9985d47e66d3de7136537d1" name="ldirectord" arch="s390x">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="56de18c4933e3e7fc41cfa8c5d78393cfe2a24504728b40523be1cb624195dba" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="31d0a594ecc278e452e3704c5374c58c6a5552d4c2ce4ed94eb3b45e6f75ca47" name="lib389" arch="aarch64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="ecc2a968101d5de60772525bf4ccb37f709d97966a9b8aef975ad877cdfd5360" name="lib389" arch="ppc64le">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="b24684b7e6eec844db73db0a9c671bda41dec269c9aab6bb44893a61252f6022" name="lib389" arch="s390x">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="a30c102683117621cc9b82dc7d0b4b6d424005a3ef9c431d821b779501851dc4" name="lib389" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="32bab67a7fd0571389103760029309a64f0011ec7e5eae093892c10d34b701c8" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="dc9fc66c6915afbc5e6ecbcd2c19d2bbcd193e55a446cebd7634742d2c35607d" name="libKF5GlobalAccel5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="792aeeec134da7225d38d98eec7fb4200da21e8c3a4569d349c08bf12ef4c5d2" name="libKF5GlobalAccel5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="01c34a34f2ba9f61acef031523c2b852b2f86d70df6f6adbe954ed98004ec8ee" name="libKF5GlobalAccel5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="fa35242d330005da9b41afa3897d024051ac5632e5fa44dfc178bcbaf6c5c2b5" name="libKF5GlobalAccel5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="41980ff3c4b803c635d4899182e131de56f1014c2d21d904c5a5955931a53001" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="9f95cfc291c5225632c8deee9cf7e036aa04fd392c95c39d8354267244a688f2" name="libKF5GlobalAccel5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="37cd9a645e3e57431e878dffdadc950ec20f4354e01c32c45a275bcb923ad382" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="2ec433de2e9c08872379afe05c06a6f0ebcfb3ebfebfaeb4769757041d10d465" name="libKF5GlobalAccelPrivate5" arch="aarch64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="18636fcd00c24d6057e363261f8c2e7a07e652afe5af1a610748f1f5e6bce4c5" name="libKF5GlobalAccelPrivate5" arch="i586">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="4734d79e6a50d0994091be6892c8fbd056c170069502304f9debd718df333129" name="libKF5GlobalAccelPrivate5" arch="ppc64le">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="0e7a73ae305460ac83e9a4cfc0cbf0b481829a1ecd96ce64aeaa85dc1dde88b5" name="libKF5GlobalAccelPrivate5" arch="s390x">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="66b99acc9cabdc446a231f7639bac4834364505d8952ede56addaff42e2f6062" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.76.0" rel="3.3.1"/>
  <changelog author="christophe@krop.fr" date="1583668800">- Update to 5.68.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.68.0.php
- Changes since 5.67.0:
  * Make it compile against last qt5.15 without deprecated method. QProcess::execute(QString) is deprecated
  * Use ecm_qt_install_logging_categories over manual categories file</changelog>
  <changelog author="christophe@krop.fr" date="1586088000">- Update to 5.69.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.69.0
- No code change since 5.68.0</changelog>
  <changelog author="christophe@krop.fr" date="1588507200">- Update to 5.70.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.70.0
- No code change since 5.69.0</changelog>
  <changelog author="christophe@krop.fr" date="1591531200">- Update to 5.71.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.71.0
- Changes since 5.70.0:
  * Fix bug with components containing special characters (kde#407139)</changelog>
  <changelog author="christophe@krop.fr" date="1593950400">- Update to 5.72.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.72.0
- No code change since 5.71.0</changelog>
  <changelog author="christophe@krop.fr" date="1596369600">- Update to 5.73.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.73.0
- Changes since 5.72.0:
  * Use KF-standardized Qt logging categories
  * Use camelcase include. (scripted)</changelog>
  <changelog author="christophe@krop.fr" date="1599393600">- Update to 5.74.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.74.0
- Changes since 5.73.0:
  * Load service files for shortcuts for applications data dir as fallback (kde#421329)
  * Remove obsolete COPYING files
  * Correct typos in kglobalaccel.h
  * KGlobalAccel:: Convert copyright statements to SPDX expressions</changelog>
  <changelog author="christophe@krop.fr" date="1601899200">- Update to 5.75.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.75.0
- No code change since 5.74.0</changelog>
  <changelog author="christophe@krop.fr" date="1604750400">- Update to 5.76.0
  * New feature release
  * For more details please see:
  * https://kde.org/announcements/kde-frameworks-5.76.0
- Changes since 5.75.0:
  * systemd dbus activation
  * If include is define in .h remove it if it's defined in .cpp too (scripted)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1605873600">- Add patch to workaround kglobalaccel breaking persistently after
  unclean logout (kde#429415, boo#1179033)
  * 0001-Revert-systemd-dbus-activation.patch</changelog>
</package>
<package pkgid="6b58c67ddaf8fcc439a0286b96fc70656ad73d4d48271d0f1ef775dedc3c97a0" name="libMrm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="4ae3ecd190173c7906cef0f34e4a6c474b78291e238de46a4356e16bf81601c4" name="libMrm4" arch="i586">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d7f5c9384d7ba2e33fa80903bb7ee5f74f12f6c1fd34de83844b695d79669150" name="libMrm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9afc15b2a87ca955089e2ede4dedec8b74ad75598e06f9583e1cbb261e96de2c" name="libMrm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="a64b4e6864e8aceb907598ff7351ee77bb19f277266505dd259cfc58f30d2436" name="libMrm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="1de844db9ce7cfdb046f58889ece61c4c85746a57c6f37c6311ad350b03b6805" name="libMrm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="39d5a5eb94c6dd9cbfdade79a999a7bce547d4f0a3eb72936e150ff828d8eb8b" name="libMrm4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="0d6e51fd6b4a73f78d4e12776cd8a482878e2028efea7a9a1ebce071eca7d680" name="libUil4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="4f56da97bd0fc727a8111686557ee67fef8166dc007ed8a71ce9e88469de026f" name="libUil4" arch="i586">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="687dab475b5c4f9dec992b0b21c3cc645ee200e38e6aba5e891b3efdb8352044" name="libUil4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="a03de6903f8a2da3c654284a398cc10e4b5d8db3538fa1d1295a66a3b72c6502" name="libUil4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d5fab196fc1c719f5ef5c73a4bcc67815b9cbde8fc66461d88675786df233e03" name="libUil4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="241ccedebd842127732c6808b2ddff33b5a7f756c21b1bc9477f4df24d678153" name="libUil4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="c65a99fd8f70da25e4ef38dbe4ba6ae65b4d4a8b9926c67b6d3c907389e4cad3" name="libUil4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="743b60b34a91e64bea792b72fb24bec1dc701d48736990e896042fce64c28f6a" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="2246f96d6e262eb428b72cc3a9be3d6f640a1893cdb05f4c04d14f6dcb5845e8" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="2804fe6e07f7c4e31bca98821eb51313c6c05ff560d624bcab7e17c0f9e8d959" name="libX11-6" arch="i586">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="dff908526ce00b0092fa82b9cb9b3e18fb856c55aea36360073a82eb56048d9c" name="libX11-6" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="e61b2723a349d5229dc7ba3e76785693a8b80312e32a17c66a889e5e43c4d64c" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="9991eb84bbce57be430fcc8d50670a43d31e00a109fcd1cbd84dc48c9e9f7c00" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="fd181091ae0fcc1f7a9b942857ddf33d379dc6862edca24b0e7dded2f878f87c" name="libX11-6-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="5646c82d13f6402e3c8b70f26ee6913d9efe285e0a05fc8396825dffe595617f" name="libX11-6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="44f1bd3de993363af770b7ae32f53d133034a2eb25cc1a7ed16fea65b0ea6cf6" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="ee2fe8352c8b8c56c758c47ce128492c666794db7ed5989eef1df0543e046021" name="libX11-devel" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="901222bc771ce179eae0bdce0c17efbfc65967cc3b4103442878599e4a497d03" name="libX11-devel" arch="i586">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="462c231e50e0c6dc6eff4c3d1632615bd8f7c60c1f09c88ac1a153c21bca18cd" name="libX11-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="b38fd5c013c3f43e4597e803bc2963d5d414b160b3cee6a51b789b5ff3a59243" name="libX11-devel" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="b02cc74240a913ade839652f23114dd23ec5f9fef7bb7c87bc08e6be5b981605" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="af57402a7fa84d0482b6973e4d6a259e1d8d824cc83f8f5b79bd851cc84197c3" name="libX11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="bbc996e9b018e6339c7d6c3293a562add69fc13c9ebc379b5eeb1d0a2a407acf" name="libX11-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="4afda3e5db6dcade88c4dcd0ace353cf4bbd7223925bf6c325d306bb5fbd4aec" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="7f72cbc71cc2cf33706daf25bbdb9c34238f41fe04e5547418926c18e94c1c7f" name="libX11-xcb1" arch="i586">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="25b3afcd6d3b8ab3bfd6ecb530c010cb61de36cfddf20cf57b2a509f16a04298" name="libX11-xcb1" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="7739fa35cf2cb4873a40565227c129b7e71670c25c92cfe0181e127b9a58b9c9" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="becafe1aed4c0ca5f6501b694eb34fa28999612814ae759b861af0fc75c6a790" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="a7c4a8fed7b8bd2aaa9b23c627df4fd1c24cbfe50f3c041d90dfc3c58813c02b" name="libX11-xcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="a541a594147cbe108990ca26839ed1ad4fb2c7748a40b1837c4d091501d0a94d" name="libX11-xcb1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.6.5" rel="3.21.1"/>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
</package>
<package pkgid="308d8e6f5c8f32cd58b988b56c1f72cf33b0a5240c813c85fec40a8461521d6e" name="libXm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="c2e879599b9346d2508dab0fe30431ab91715e9e9faa6f731d30edb4683c4c59" name="libXm4" arch="i586">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="bf2b5cfe5511087a4d2c7d31e15882174ca38f547f3c4c0713b24641a9a238fc" name="libXm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="d9b237de963506b8466eafacb42d6f4edc61894a635dfa0ba1e1e3ab41937a57" name="libXm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9781239f040acaa587d358d8162938653ae2dc9858f106ec68104580eeda51f8" name="libXm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="f403289ccf988dd9deb9b257b5558b44ec8e3025e38dd02f0044ccdbd13afcbd" name="libXm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="fde436f2b6a67985f09590c76d09025e46226605de53eb2efcc174ccae9c3464" name="libXm4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="0eb243a0ad4933333641f7b05b87b795f3f29b33f0d6cf7a9d3cec8be6fd54df" name="libada10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b42b951f2ea9003dd34b3e91b9070b30747eb6387d4950c94c2bf5bf9931540c" name="libada10" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fc2ba6b9005c2c190b14ed5106aeac0d54b3c4499ad82e7ddf501e1709c5500a" name="libada10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9a3a3029359dfc17b668c3bd3811f6aa14fdd5efe4caeb9bf7bb2e6673036466" name="libada10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="384db56457332b068b7661509e79dbef24ca28e1f5cd8261bf7f92496d650707" name="libada10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="756128989edf3e637dc7e9cdc10a15ee030efa82ee8935870441017c58bbfc28" name="libada10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2d2c8cb05ad56bfa78bcc5dd8224e0f0b6627509b9271351ce3ca8d859ffdad3" name="libada10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8713e82dd377b087337686146ee0ab64718ace7e4090f4e900783478a24bd698" name="libasan6" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fe924317edefb00ba10277b73225ee2d5a4cd83cab5db253021bf9592422e9a9" name="libasan6" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b2c6c455bdeef046b633ebd07093ab35d85f82ca47e907a31523554a08b7e473" name="libasan6" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c28c6363ddf8b290c5af440c0ae68d3aca3a0bdb7659426e7ee4041a0583b41b" name="libasan6" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="94c83e97c29264857bd157141b0c30ddc5a28bf9fc2eafb9fb09184abe90cd4b" name="libasan6" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d525b32e19ee095a4644a990243195043911cd0e6d5a7e5966813424e39da6f9" name="libasan6-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0067bb202a0665c0d7b3cc6d501c710d569d8d72e396a12dbcc8da8231728736" name="libasan6-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4aa1787c7216c9b55984d01b08361363334d2c16cd88206f8339c4511218c580" name="libass" arch="src">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="014d735f7f9b0a694d27f5d998e0b8466476022280747b69908aaf9b8af540a5" name="libass-devel" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="ab8185575e0fe0ee8c89174dc4821e6e06ae9eab5957cb2936fd9c56342eed6d" name="libass-devel" arch="i586">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="18ca655c9fa5b04479af59edc4b0de6933339fe25f9d0116bc984a6259946484" name="libass-devel" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="3ba2a91aa1ce1292c86ae0d7002e0de4c443b8fef3ea53ba1511fa140233ef99" name="libass-devel" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="55ed420a118c5c6883cbceb87e70eb4ed213bbfd6c9408da3e559a78c8a10ef6" name="libass-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="d961473cc7ef3bdfa3b7049fb6bfa1dac5fc01e62d89f6cbef07431825a1216e" name="libass9" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="bcff1238e7529d6e4dfbd18adbf3e65bf76a6bab1bb5c715b539c96bd0334772" name="libass9" arch="i586">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="8489d86e3642678de3be5690e22f10d1ee0ada5ef6da16c5306a0d8aae521e57" name="libass9" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="5ef37fb250ba36d6824e7caebef24618061f341d4ae0509c03cf41b58e8e2da6" name="libass9" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="b64cc9b61ad30b515c1d256887f5ae452e4b51c908aab7fb0493cecbf20fed11" name="libass9" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="d79c6d4b1f7c89f4acf6d426dd1c4465c965602daca875acf6474a5fa0a42ae9" name="libass9-32bit" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="ec999c6d5cc57074865fa2dd6c57ff793be0792614979d512163bcb6efde27c2" name="libass9-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.14.0" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1449489600">- Update RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1450267200">- Update summary/description</changelog>
  <changelog author="idonmez@suse.com" date="1450353600">- Update to 0.13.1
  * Much faster duplicate event check in ass_process_chunk.
  * Interpret negative timestamp components as actual negative numbers.
  * Look up fonts that contain PostScript outlines by their PostScript
    name instead of their full names. Family names continue to be used for all fonts.
  * Keep spaces in font names
  * Drop support for Fontconfig &lt; 2.10.92 to ensure correct font matching
  * Fix some small memory leaks, potential crashes and bad data uses</changelog>
  <changelog author="mpluskal@suse.com" date="1456401600">- Update to 0.13.2
  * Add ass_set_check_readorder() API function to disable use of
    the ReadOrder field for duplicate checking in
    ass_process_chunk().
  * ass_step_sub(track, now, 0) now finds the start of the subtitle
    at now.
  * Bug fixes:
    + Fix an issue with the new duplicate checking, which could
    lead to missing subtitles after seeking.
    + Fix a crash with Core Text under specific circumstances.</changelog>
  <changelog author="tchvatal@suse.com" date="1475668800">- Update 0.13.4:
  * Fuzzing fixes bnc#1002982 CVE-2016-7969, CVE-2016-7970 and
    CVE-2016-7972
  * Improve compatibility/portablility of build system, should fix e.g. compilation on Solaris.
  * Fix memory leak in DirectWrite font provider.
  * Fix the rasterizer when rendering some large outlines.
  * Remove hack that forced RTL base direction depending on font encoding.
  * Greatly improve the internal caches with refcounting and gradual clearing.</changelog>
  <changelog author="mpluskal@suse.com" date="1487678400">- Update to version 0.13.6:
  * Add Justify style override that changes text justification
    (left/right/center) without affecting event positioning. This
    breaks ABI compatibility with prior releases.
  * Fix ass_set_cache_limits() to affect total bitmap cache size
    including composite bitmap cache.
  * Number parsing fixes
    + Fix illegal read when parsing some numbers in scientific
    notation with huge exponents.
    + Correctly evaluate numbers in scientific notation with large
    exponents.
    + Correctly evaluate numbers with many leading zeros.
  * Bug fixes found with fuzzing
    + Fix a small memory leak in the parser.
    + Fix illegal read in the parser on specially crafted input
    with \t tags.</changelog>
  <changelog author="idonmez@suse.com" date="1496750400">- Update to version 0.13.7
  * Fix invalid memory accesses with BorderStyle=4
  * Fix change detection bug on frame resizes
  * Fix cache bugs with border size
  * Reduce precision of border width in font outline caching
  * Don't treat :;&lt;=&gt;? as hexadecimal digits in color headers
  * Fix parsing of unusual Alignment values in ASS style definitions
  * Fix potential truncation in timestamp parsing
  * Treat negative PlayResX/PlayResY like VSFilter
  * Fixes to parsing of embedded fonts
  * Remove arbitrary bitmap limit (fixes issues with subtitle rendering at 4K)
  * Allow using shadow offset to adjust size of background with BorderStyle=4</changelog>
  <changelog author="mpluskal@suse.com" date="1512302400">- Update to version 0.14.0:
  * Brand new, faster and better outline stroker (replaces FreeType
    stroker)
  * Remove option to use the FreeType rasterizer
  * Fix spots of missing border around self-intersecting shapes
  * Switch from Yasm to NASM for building hand-written assembler
    code
  * Clear font cache in ass_set_fonts(). This fixes potentially
    incorrect font choices and an occasional crash if this function
    is called midway through rendering a file.</changelog>
  <changelog author="pgajdos@suse.com" date="1615896000">- security update
- added patches
  fix CVE-2020-26682 [bsc#1177862], signed integer overflow in the call to outline_stroke() from ass_outline_construct()
  + libass-CVE-2020-26682.patch</changelog>
  <changelog author="mmachova@suse.com" date="1619697600">- Add upstream CVE-2020-24994_1.patch and CVE-2020-24994_2.patch (bsc#1184153, CVE-2020-24994)
  * Stack overflow in the parse_tag function in libass/ass_parse.c</changelog>
</package>
<package pkgid="8f3040e6fd1edd5755f780013ec9ed0c82bcd25f0cf1509c7d36a2f93d460e1b" name="libatomic1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b86ef9118a5ff6bdcea790451c43a0d6db5d4ee1e11d091cafd6ec4381e15305" name="libatomic1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="36700b4007bd249d25152d0a00a3819cc146a9be104ed6a5181e9157c20a8173" name="libatomic1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5f53f5ec9becc3cde3e2f25c7f62fd28f5b02d7dc159505d382377473fb9ed4c" name="libatomic1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f3adfcb0eee0806b987f7dc6731ef814bf617626f769762e24caca2564971d20" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="71d9fa77165cd928a8b8e942d1930c9287c2aa8ccecc53e98e0d9bb4506cd95e" name="libatomic1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a500a744bc83504f43a9f3326b15d01d4f69586273786ae4e3f85369b2167caf" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="21ca0d11b0285edb610c25bb31275a1d48df522ddcca576f5c458413960df869" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="a24d82f98d01f5f0f4dc5615446724c5854e51229c17dd182abfbc2215c8a8e9" name="libavahi-client3" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="57d6790f2ae8ac83d7ce75f81d374bd9172970bfd6799baf1e77e86d1ed7d538" name="libavahi-client3" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="edc3e2765d13c65ed66cf3277ad72d275b2b608976ec17ae5fa50d53b083d3c8" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ecda94b6ab5a4092db20a5fb7225225555910f15fc7e16675b3a93bc188a50b5" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="d39bc2da3b4620faa73175055bcdb35ed142ef246366b07ff1123632a60b9bd1" name="libavahi-client3-32bit" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="445946c5233c6c7decda3805ab88b4b04a11609116c06e2feb972ab016efc703" name="libavahi-client3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="62c1a1cf922d7d8de18ac8bcbfdca770783190516aa12ba7dc8ef4bab92258ad" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2c2143e62fe1e4c3a20332522aa4866be2678c85cbbd3342f34ed35cc74649ac" name="libavahi-common3" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="db06253c925b04503b7a117636b5ccbe4d66f07104279ed8f8134d0c502cf298" name="libavahi-common3" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="87d59a991591600946f5576d2e4dbc599ebaea83dca41a60149f75483cb0cb5f" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="6b82e4a32da5fab4d9d7cb8efce258844cb0b4830e12822187b5fa8ce5528412" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="8cf9390f763d668105e5a68ce79629469a969762da4e7bff50ce670cbc099baf" name="libavahi-common3-32bit" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ee9d2fe23c6c28cd52d04928c6b4d9d75864e6019177a51d879d91de8ed75cad" name="libavahi-common3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="7fff24c364ee796a0289c5bbc40a9d9aa7d25ccb7c99016d4aecf1b89e91eacd" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2ccc0e40f78784068cd0a548cbebad09caab8c6ae035a49f23b1f601b00ad4d8" name="libavahi-core7" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="7e9a9776957552e77b121b96e995ecb6c54da8b306ce8dd6e6f9acb70150df82" name="libavahi-core7" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="579817040ead981434ca86efea7f2d501da5a85d916c3a5934c150e31f1ac00b" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="678569228ecc8989a14bad276aec1235968560a90b293b09055b423d376fdfdf" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="7b3e3111709f345f4acd70816d39d443e543510abfdb562aef5ec03cc62123e5" name="libavahi-devel" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="74fdf910e2afe88d29b79465b1970141e2b8e4fc04577345e7dfb87e1e4667ce" name="libavahi-devel" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="62cbf4e602d71057fe3c5264ac1b60902f79be31b0483b87d386e7bf7f1aea47" name="libavahi-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="9b81d698c3d383f10c53acb4bcfaa20259f062097773927fa97e548653194981" name="libavahi-devel" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="b29512168035f908de424dee377cddc3165aa6a29e19a8fbde9646d36683f58a" name="libavahi-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ad5c9cb5ee61afc513b59661b9b1ee875b3a378f8c72666998a3cf3e76a1c707" name="libavahi-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="54a3c67a88c7b04fe08d48aeaeeb6c080b06cd02198ccd649519c1c3ebd78428" name="libavahi-glib-devel" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="c4f6b7d5e21e1632589dd400110f945de0ac9af8ff5155f2e22d6666ba697a17" name="libavahi-glib-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="c322006d553aa5c80c24a9f82b1a8abe238e05ef4f6fb6e4419356e0913fe13c" name="libavahi-glib-devel" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="354706d264fbb4c42a01481d282791dab2261df774c7844cc137bf605c6468da" name="libavahi-glib-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="58d7de30efde0b0e83426dcc645627abd67a3fa25bf9002434a60bd41bbad262" name="libavahi-glib1" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="bcf0ae9e220bf4b8bcfe435f317b12236ec7b4246d3467a30b873c7f99b632e6" name="libavahi-glib1" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="2e8285f14db889797f47b3d2fdef2b8df1d09bfaeaa388d348d081e6f6ec1774" name="libavahi-glib1" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="376b8919c0a1d28ef419c446ee5900dedcac80ff84d9a6258c9e972cb63b4caa" name="libavahi-glib1" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="4129ff6067c70cda1ed3508d6d22e943d246fc2550d3c1e61dbcb0426b5f939e" name="libavahi-glib1" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="f01c4d8b8bd31028e302cd049496a4eb9babf90b41bc2fc20d05e9b46686f46e" name="libavahi-glib1-32bit" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="fe1f4ed9e4dd78a5a69cc2c304327c6facfa48dc1d1aaf9918994546de8a2c9c" name="libavahi-glib1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="15b5e2dcc2008f1b993f60c6f6f20cefa4912dbb2d34b7a5926d6db62ae59e05" name="libavahi-gobject-devel" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7b1d916a149a748fd02bc07e5cb2dbb84d36ef90b02039288e74bc972ad21501" name="libavahi-gobject-devel" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="23c6ad0ff70746a6c05425c38681014f2ebc6b4206a9e97d55e5867078e17c76" name="libavahi-gobject-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7d2daa363259604489553ec6d594a951585f9ab28338eb37198ece14eb0c48be" name="libavahi-gobject-devel" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b18a0fcffd8b53fa1425a5ba678a21e8c24d44a9e6ebfcb21c7d38d3e0488806" name="libavahi-gobject-devel" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="3f11c03d25890e2395748a8a166b0ee4b7dfb773996fe18b7cf5ddc87a8c02fb" name="libavahi-gobject0" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="a8cef5b81b584f132b8e519c62712f719a3378d2ea5b9c2c3f555ad2556e316e" name="libavahi-gobject0" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="6c25532394f77719cb3852e5fee2db2c44efa53ba0069e2e0065b1ef06d6ee12" name="libavahi-gobject0" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7865c07c5c98508615da7212735f7805b0235448d226e8a86e133ac54b8d8aa9" name="libavahi-gobject0" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b73afa58f02e6c27994c0bbe4676d789e2e7821b7d210728315c21c5076be716" name="libavahi-gobject0" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="45110ad45b7096d6e2ead2fb79979416f63bd4629253dff720b77ce64dfeda05" name="libavahi-ui-gtk3-0" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="bed99ec24b1829dfb8ffd9dd2d453994ca86017ffa037142ab1afedd23d224eb" name="libavahi-ui-gtk3-0" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="2b28ef136ed735b32cd762898e9200a61bb98a32c8c06bfee62fa9c9d66fe4ff" name="libavahi-ui-gtk3-0" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="eaa285cd52cae3a34a4aa4aab36cc81bd1fe64df0349e54196bc8d0018615b6d" name="libavahi-ui-gtk3-0" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="312e446a7cca2d59e6a4ecd15bec02dd99001370592384f6bf489a74f5a4c12a" name="libavahi-ui-gtk3-0" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="06acc92aa608144ac5e66f5143acb2af31a5965e92d66fef2a4cca321f360186" name="libavahi-ui0" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="605878d4c32a707455ff7348f7fb370696308e88e7f28b78de93bb2daad4e926" name="libavahi-ui0" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b38441a0e4eb12dbf7594973bb234a0f4c73af6b5e45d8c9febffcdbfc311931" name="libavahi-ui0" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="3cf9b558d08230e3f2ce45cae6f7514461afa21969f4b9aff63b27aae594a23a" name="libavahi-ui0" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="e1dbe6b5f2eddff11ee9e85a80edbd0306b5263f05863d8f7474aaad26c2538c" name="libavahi-ui0" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="38eaac1c8e3c11235d07f924d0fa53c5ead4371ae18e654316a066c3b2bdb1a2" name="libbind9-1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a57906aabeed4fe4c1f0581eba6b64f09a69c6f648ec4dbf6832a142f14637c5" name="libbind9-1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fd355fdb16df73ae6c92cec53e5c6dbd2a66906eafd61c31dbfc5d40e966579c" name="libbind9-1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="df4f2a15a5e023f747c62f4711c08b72c88f2e7acea3bb819008a473d0cd0ae6" name="libbind9-1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a45d38072f007d46c30f03875c9cec69b689567187c269205fc1083067af5caf" name="libbind9-1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="78daafd30d5943c68f8a809aebb719366008fb2814a0a9ab2c0b37bd69ff06cc" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bcebfa391914c729ec42cdbb179934be8fc09c31b798759f44893c350048e709" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bd54c92220d3789a0a22dc70ee530a33f86af66f9faae9f77a8387daa1722ce9" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ffefef66195411ba7f080d8fb99f275c5883fb89da1a6c15312156133a8c769" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e13f206a6eb0a52bc2dd43548bfcfa5db588fcb04c817c515c6785ca32e8fe89" name="libcephfs-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5c0c0bffc4457e9cf72df08c1407d9b50f11c83ae77c3a6996d52359d712e3c9" name="libcephfs-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1c3002b1efc60aed4f9628d141d380e1ccc11da683a29e91d273f4b89f744d04" name="libcephfs-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="17b6e7b9d9832f2bd3e4623bf5e6afc5eccce232bee72b0d0d2a8bf1ca591873" name="libcephfs-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59d6982aeb2326f92cd97cd450cf85240629da5dbbef63db9d058dc5b9418a07" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="228a3bea31d8f22de2d4969c62ae403ffb4b25e366f05d9fed794b292ff6af70" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8ffa497099b1d7dfcedbdfe6ac0d409630f2b653ce41974d56fe3a10e92011fe" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c6683bdbdc4f2858eee40089118cb74bf8c8e94d80e14adca8d4a3affbe28e8d" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2bf57d4cb71f89c483614b877c767ac128b6859127eb4b624cc57dc5489cf0f3" name="libcephfs2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="33e1221dc3590caf44e52eb641503c6a313f48f3df9954f0b1ea95a81807c8c5" name="libcephfs2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b73093fcf1f8f732c3a4be84ddaa5875651069d06ca4c82f3c6565688c076a45" name="libcephfs2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c2ff6484fd284df8ae2bfd458104f8a65d5c130e7fc49826bd64d8913ddbcdf6" name="libcephfs2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1e606636cbcdeb4d71f7b0b304a4e00828dc058bef6dd2fa52859cd49ada5f2b" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7f4eea114d17d5a8d8a7555204cec7b7cae0f88a52e1cfd9c87d398c1f71ac11" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="4c8190db57c7973a20e2dae8d29e129c9eb2023b53470a22d41fa84847dbea3b" name="libcurl-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="099ae6dc19ccecf4cefc7368f61b7aee8a5198a526b80885f33b9bee475d4321" name="libcurl-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f426777c0e45a220a2f00d004ce79eb70fb6d1a7541f1304d4cfa236fcdf91e6" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="0b14a2964abe9678f6c4e29669b894e90861eb323cf2fc53916f75d5b7bc4cf7" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="b4ae477f6ab39aa2c0cc51ed3e94c253d3b2582f09cf3563849bc00bc2979cf9" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="3d494158bc38ba244cfac781e606804667458d10089b96ca1aee12846f37aac0" name="libcurl-devel" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="68063bd156e1f9defcf8537237f22c70a136bc02a6dbe97e246aea59efe693b2" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e06dd31f233850cb96b6e46d7f7a9ffa090e6855a5d4391914f3bab50b5c7559" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c941ad82ea02788405a91f3b8005421a9e5e27429c01b206b02425a4d6483f57" name="libcurl-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2199566a33b6704fed1a0f02d64469a9983ad63dd895712e121a47c53352a486" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="34e74c96f652c02eb1675b29b04f705575b6ad081cbb9305f60d0c8a96866e2d" name="libcurl-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="09c7a117f07f912f7d6b0c6aa6bcc4afaaf35bd28167bf33324b82e830fc1a0e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e91e0b464a9b164202f65142cbc5e604266a189d7e705ff1c2510e9fcfce7252" name="libcurl-mini-devel" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ca248409176d4dd3e94c0e291fa56ab9b8e0fd48d3b0856221370db61249f7ea" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="a311e46ac440e2a4c84af48d4baa208e3910e0bba82f4a944e041f3d65e7347d" name="libcurl-mini-devel" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="99dae43054debc335e38ed457f668e28df0f8126e046891a5430e9b541fb6d88" name="libcurl-mini-devel" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="5b3e95923d754b06e9da7aef0314d15c6a6695eb73fbeeb8013392f4872c848c" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="61e1ff717789c8b4963c79673f6be9628900e40ed7868cd934913b3b70bbf7f3" name="libcurl-mini-devel" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7fd43f8219abe6e331437afe5dcb96a24c7113e237123999b251fcacd116b396" name="libcurl-mini-devel" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="b399bd21183b5202a844572c3a85a227d5087e8ae78e7abb027e5274e9c05b24" name="libcurl-mini-devel" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e5092f406b10fdf98460122eafc27a447e21ddcc9093f72b90ce7b9db84a1308" name="libcurl-mini-devel" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="d7d7557db8b60349cc498e0ac1815a2a7c31c98a5d943d586280af38eeaa22e8" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="bdbfc6ee2ee30b1e3faf25bfe01efb4bfa032fad00d7a87e6d17d9e51102e1b1" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2e963d20072fc86d88dfe0cc29994de87b59ee038cffc0ba079db54982bff4a9" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="d5c70d1a3f315d3d4522434aa895ea6c01613f6f2d9ffef6049b36dfd85dfbb0" name="libcurl4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="3731a14baa98dc44efea30eddb32b26e6115e494b91a57553e8fbdb9e2d74ae2" name="libcurl4-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="60d961b3fa0996c4902afa94b1138278325b2692c52327659c61634b75cd888c" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f38452c61178016ed32b0df09bc6bf7cb0907a998d3dadea9e07245989425c0c" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="0981396737a8c6ae9ba63ad80efa9d1f98716e653d94eff5cd890683a756790e" name="libcurl4" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="bfe6fe633cc17a1aaf1d493e57fd8f46830ff9cc51805ad785b4a10a4ebde6d3" name="libcurl4" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f6855862c0a10e3e64a7d9e7468d138c351ae6c1e0e9bd250ea095c4ae3026fa" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="ed8cead9f99d97dd7bac3e472d6694754d14a6cd9c2dfefb0adc2d5030d84705" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="659617b3a96aa218c3a40a762e124e3a301f32670ea8a0a4f8e4b54bb251489f" name="libcurl4" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="1edc326b11b96d284ca81ad2752abf53a59db11df8d89303d9fd9904ae62b1fd" name="libcurl4" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="2664f7622d43936acae8c4c212dd0004d4a4753dc4a271f902d41d60de9bdbcd" name="libcurl4" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="67161338cafa2692a81b44fa2b4ccf26be41570d219adc5be96a1eb52c0d9e04" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="27db8a2dd482074cdb7c7bc7063261f1f097e94c43a96122b017cc26ab9ea68c" name="libcurl4-mini" arch="aarch64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="3bf994ea32c9c267cc8e9368c02db756efbd968c90d1f0da537cc37c70e8d89b" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="8b092d47863bec223b9e628f13e454f05cdd0e19f16395bac7a8e8317dfda543" name="libcurl4-mini" arch="ppc64le">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="e4bbb64edb3cdc608a9d25d2a5bd3921a8145568f7ce7684efcb415e7c71db31" name="libcurl4-mini" arch="s390x">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="fc8656b12fcb81d9d8af37db6681a11aa61b509c3757932d80c3d9b19cbbcd55" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="3.42.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1571745600">- Disable flaky test 1456 [bsc#1154019]</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1610712000">- Fix: SFTP uploads result in empty uploaded files [bsc#1177976]
- Add curl-fix-O_APPEND.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876-URL-API.patch curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="f266fc6785e956e5db22b216b0ce31e3456e6afac6436f935afc7fa3208355f7" name="libcurl4-mini" arch="aarch64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="54cc31c59567f50e7ba95cde2fe076c892e612793180023a8246aeca38839fe4" name="libcurl4-mini" arch="i586">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="98f1285a54b3e6014e017508da5cd555a6be81fd1bd4046f0ca97385ffa58421" name="libcurl4-mini" arch="ppc64le">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="7f86c5620eded4a015dedfb2514ee1b567a05688e4d8cdcf80942f8739cb059e" name="libcurl4-mini" arch="s390x">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c98cf34671d647d3a5a4812610902cdf8b19202755a9f10c68f326faa1e87719" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.66.0" rel="4.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395200">- Security fix: [bsc#1173026, CVE-2020-8169]
  * Partial password leak over DNS on HTTP redirect
- Add curl-CVE-2020-8169.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1592395201">- Security fix: [bsc#1173027, CVE-2020-8177]
  * curl can be tricked my a malicious server to overwrite a local
    file when using '-J' ('--remote-header-name') and '-i' ('--head')
    in the same command line.
- Add curl-CVE-2020-8177.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1597320000">- Security fix: [bsc#1175109, CVE-2020-8231]
  * An application that performs multiple requests with libcurl's
    multi API and sets the 'CURLOPT_CONNECT_ONLY' option, might in
    rare circumstances experience that when subsequently using the
    setup connect-only transfer, libcurl will pick and use the wrong
    connection and instead pick another one the application has
    created since then.
- Add curl-CVE-2020-8231.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342400">- Security fix: [bsc#1179398, CVE-2020-8284]
  * Trusting FTP PASV responses: When curl performs a passive FTP
    transfer, it first tries the 'EPSV' command and if that is not
    supported, it falls back to using 'PASV'. A malicious server
    can use the 'PASV' response to trick curl into connecting
    back to a given IP address and port, and this way potentially
    make curl extract information about services that are otherwise
    private and not disclosed.
  * The IP address part of the response is now ignored by default,
    by making 'CURLOPT_FTP_SKIP_PASV_IP' default to '1L'. The same
    goes for the command line tool, which then might need
    '--no-ftp-skip-pasv-ip' set to prevent curl from ignoring the
    address in the server response.
- Add curl-CVE-2020-8284.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342401">- Security fix: [bsc#1179399, CVE-2020-8285]
  * FTP wildcard stack overflow: The wc_statemach() internal
    function has been rewritten to use an ordinary loop instead of
    the recursive approach.
- Add curl-CVE-2020-8285.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1607342402">- Security fix: [bsc#1179593, CVE-2020-8286]
  * Inferior OCSP verification: libcurl offers "OCSP stapling" via
    the 'CURLOPT_SSL_VERIFYSTATUS' option that, when set, verifies
    the OCSP response that a server responds with as part of the TLS
    handshake. It then aborts the TLS negotiation if something is
    wrong with the response. The same feature can be enabled with
    '--cert-status' using the curl tool.
  * As part of the OCSP response verification, a client should verify
    that the response is indeed set out for the correct certificate.
    This step was not performed by libcurl when built or told to use
    OpenSSL as TLS backend.
- Add curl-CVE-2020-8286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616587200">- Security fix: [bsc#1183933, CVE-2021-22876]
  * The automatic referer leaks credentials
- Add curl-CVE-2021-22876.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1616760000">- Security fix: [bsc#1183934, CVE-2021-22890]
  * When using a HTTPS proxy and TLS 1.3, libcurl can confuse
    session tickets arriving from the HTTPS proxy but work as
    if they arrived from the remote server and then wrongly
    "short-cut" the host handshake.
- Add curl-CVE-2021-22890.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620907200">- Allow partial chain verification [jsc#SLE-17956]
  * Have intermediate certificates in the trust store be treated
    as trust-anchors, in the same way as self-signed root CA
    certificates are. This allows users to verify servers using
    the intermediate cert only, instead of needing the whole chain.
  * Set FLAG_TRUSTED_FIRST unconditionally.
  * Do not check partial chains with CRL check.
- Add curl-X509_V_FLAG_PARTIAL_CHAIN.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621252800">- Security fix: [bsc#1186114, CVE-2021-22898]
  * TELNET stack contents disclosure
- Add curl-CVE-2021-22898.patch</changelog>
</package>
<package pkgid="c83500ae7be69fc43f8867535e0449cba17d1abac1dc7782e7c195fab2630067" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="ec0830ee27829200792c2c934c1b3467706d221fca1fcd66bad88f8ab9c84d63" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="dc98b21ee9f68412ec75e2031d8f3833d0c8f46c94d9bd941d631034ade92d7b" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="0a6bef58f68b5fa07b2a48bcf4f157567730350a8000df8399873c4320e2916f" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="eee6461e08130838ff272a115c09ec0811c2c3dcc5966aa73521b607076a67ed" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="27ba1d0d54fd347643be229a1036ecd2f85c40b83447a2820d5295fa24479c52" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="6ca97cb244b54534e4003b59942f7fb8879c464a3d834532882e3871e5896f0c" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="149dae69c68e3971c9948186653ff72c9f329d6a34c2155342664829954ffc25" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d9573240d53ae69f8e09fa3929485bbfea8ff804c39fc72833cd7e43f9780d0f" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="822f58ee0a719d08cc2fef07fddda20c9dff92f7b2aabb7a90ed2d4d94906e96" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="e042cf41bec08811179f7814b76b593776f8457c9a21802e0dcd73e4bec5b15d" name="libdjvulibre-devel" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="81d5dca5425da02174e5cab0fcf20875593a9347a69fc198a4bac833f52de135" name="libdjvulibre-devel" arch="i586">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="9228ce00db0eb9a9904a19d6cb3943d1aae5a7c54aee5adf90dd611978f4f3e4" name="libdjvulibre-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="6738aa825deef5b5b2ef4d3de6fe6d794c0eede45ce374b9bd79d0ee1e52482b" name="libdjvulibre-devel" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="042f05dd8705aa6335dbd8009593bf992bbb1203a3d824411c9cf61eeb47b7de" name="libdjvulibre-devel" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="9b0f4727ee654189ed81763fb49af229861b2f24e7d1e148ca872303dc18edca" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="7215a30222e09f2543ec3a0f2eeed9c9ac9e2538e73a720c7cc720c755e436b0" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="28417c2eccbc9c0b11820e074128c08d80e15c0f67cdfda374d0f4fc5cebd0e5" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="167aafd652a6f00a69f894153e63a742967d20fbe3a6d63d41f3fec6e7eb30f5" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="a9f493f53f3d36c687e259c6f960b59f6227a2a3882ea2b4b643f615bbba5bfd" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
</package>
<package pkgid="9430a5c88ae915f2479c2a5b12ae0b53b3c4a0769699bfb3d0f85011f7ceb2f2" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="61c9b735f7d4fc33676dfd16d43dd96eaf3189d44a4f1272ef7f171e6a22175b" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="3efe7493d8a007474ce853529489b60b8adab956c2865095c4c66ee7b7ba9a45" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d12ea65ae823758b03f920217f199f1f2a3db9b11d7689d09dd51bc4472df5fc" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="41e4bd9e341c7cc452429d691eeae3d0f586a6e57786374edd4a390cb556ca0c" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="11.6.1"/>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1546948800">- Remove rsvg-convert BuildRequires, just use the prebuilt pngs
  from the source package.</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="jengelh@inai.de" date="1567512000">- Trim conjecture, bias, and metadata repetitions from description.
- Trim descriptions in subpackages for length. (Main package keeps
  the bigger one.)
- Use some more macros and limit fdupes to the /usr volume.</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="aa62106e08cc8e1b0eeb46378f1216b88b02474ffea8828294dc80349ac76e8f" name="libdjvulibre21" arch="aarch64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="9c36152386bb6dde99660d129035afe5dbcef9adc5ea051a01a8dfcf91da1128" name="libdjvulibre21" arch="i586">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="cc377efdc416544e6f20fcf6a8ae9b52be1c54a06489e46c55ce6d3c1651be64" name="libdjvulibre21" arch="ppc64le">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="7c61b39ce1619e9bd4ea27f64f236d4e199e840829dd85af833fc3bbc13bd693" name="libdjvulibre21" arch="s390x">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="26393299e40c2cd42e866049f9e56f5411e256bffdaeaa1ce81d95bee5b4e80b" name="libdjvulibre21" arch="x86_64">
  <version epoch="0" ver="3.5.27" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1331899200">- updated to 3.5.25:
  * Removed the deprecated djview3 code.
  * Removed the deprecated cothreads code.
  * Removed the unmaintained japanese man pages.
  * Added ddjvu option to skip corrupted pages.
  * Miniexp API is now reentrant.
  * Bug fixes all around.</changelog>
  <changelog author="dimstar@opensuse.org" date="1332676800">- Add pkg-config BuildRequires.</changelog>
  <changelog author="pgajdos@suse.com" date="1364385600">- updated to 3.5.25.3:
  * minor fixes
  * call autoreconf
  * do not cp not existing prebuilt icons
  * not-existing-icons.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1425038400">- Remove obsolete patches
  * djvulibre-filepath.patch
  * djvulibre-not-existing-icons.patch
- Update to 3.5.27
  * simplified configuration scripts
  * deadlock fixes
  * miniexp under win32 uses tlsalloc instead of _thread vars (pb under xp)
- New in 3.5.26
  * Thread safe miniexp
  * Now using the standard autotools approach (thanks to Vincent Torri).
  * New windows installer (thanks to Konstantin Kravtsov).
  * Fixed Russian code page issues in windows.
  * General speedup thanks to lock-free smart pointers.
  * ddjvu can produce one file per page.
  * djvused can now set the default page orientation.
  * Bug fixes all around.</changelog>
  <changelog author="bwiedemann@suse.com" date="1494849600">- Add reproducible.patch to make build fully reproducible</changelog>
  <changelog author="pgajdos@suse.com" date="1567425600">- security update
- added patches
  CVE-2019-15142 [bsc#1146702]
  + djvulibre-CVE-2019-15142.patch
  CVE-2019-15143 [bsc#1146569]
  + djvulibre-CVE-2019-15143.patch
  CVE-2019-15144 [bsc#1146571]
  + djvulibre-CVE-2019-15144.patch
  CVE-2019-15145 [bsc#1146572]
  + djvulibre-CVE-2019-15145.patch
  do not segfault when libtiff encounters corrupted TIFF (upstream issue #295)
  + djvulibre-invalid-tiff.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- do not segfault when mmx enabled [bsc#1154401]
- added patches
  https://sourceforge.net/p/djvu/bugs/293/
  + djvulibre-always-assume-that-cpuid-works-on-x86_64.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573214400">- security update
- added patches
  CVE-2019-18804 [bsc#1156188]
  + djvulibre-CVE-2019-18804.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620820800">- security update
- added patches
  fix CVE-2021-32490 [bsc#1185895], Out of bounds write in function DJVU:filter_bv() via crafted djvu file
  + djvulibre-CVE-2021-32490.patch
  fix CVE-2021-32491 [bsc#1185900], Integer overflow in function render() in tools/ddjvu via crafted djvu file
  + djvulibre-CVE-2021-32491.patch
  fix CVE-2021-32492 [bsc#1185904], Out of bounds read in function DJVU:DataPool:has_data() via crafted djvu file
  + djvulibre-CVE-2021-32492.patch
  fix CVE-2021-32493 [bsc#1185905], Heap buffer overflow in function DJVU:GBitmap:decode() via crafted djvu file
  + djvulibre-CVE-2021-32493.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1621857600">- security update
- added patches
  fix CVE-2021-3500 [bsc#1186253], Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file
  + djvulibre-CVE-2021-3500.patch</changelog>
</package>
<package pkgid="d1b5eca71f4d8f3aa30392ebd0ca46f9d81a8ae3aa44379aa5c33174b552c59d" name="libdmmp-devel" arch="aarch64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="16d43af26a5088ad78b0b15c1ed90acc423fbe9f8434b6a597aff2a355e6f3bf" name="libdmmp-devel" arch="i586">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="53503420d9e1b2c590a6b85baba795018e579ed0327a4826825761b828146b5e" name="libdmmp-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="e9845d8599e534b9d80b281e4971556c485d9372a2a89a71e0d0ef8d03b8d50d" name="libdmmp-devel" arch="s390x">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="f92ef25edaccc6f73ce86fb9566661aa9fe624ad73ae0b405ce3e22a1e367138" name="libdmmp-devel" arch="x86_64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="af10712cea3858d3a0a29e762de9f5f79ac1da232d0343ea9302ae23f909db81" name="libdmmp0_2_0" arch="aarch64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="3113bb50247679c0bccc57b40f86467b77739e4cde25dd3d5702947503de844a" name="libdmmp0_2_0" arch="i586">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="d96bd0f1fb6aab2d5448d378e15bbc9d1b7d1d2023936234f4717a9373aba071" name="libdmmp0_2_0" arch="ppc64le">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="90433bc9edfeaeae77b5c89b60e4a92021636876f9ca263193e80cbc5008a90a" name="libdmmp0_2_0" arch="s390x">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="b0b1292d396fba740791971a85eacc4f1e4606d6f39c683dc740e3df962662f7" name="libdmmp0_2_0" arch="x86_64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="bf748bfe38cc481ca97726ebc3bd9071e204ecc7c78bf65830ac84d3c0c7e702" name="libdns1605" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9eabe7cea0f2996b6cfd7ca46fda9039adfc6a48cf9d08f4018540def14f3ec1" name="libdns1605" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="74678510949251db50335ca73f1609d4dee40aaa08818ae5f1e0ac15300902b6" name="libdns1605" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="dde510708e44bef912c721f25c218003f904696106aa9d234a831615666843dd" name="libdns1605" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="edc8e7842314014769d045dbf75a9dfe50e05e1dae69c7e62233ef415870f479" name="libdns1605" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b812e05baee775947d82e38e02b6c132e76ef6755438a31f0f164f5b006624bd" name="libdns_sd" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="6fadab25c2666472a1119a6bde527c30e0e3ea8e0d1811d282867193dfcff388" name="libdns_sd" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="ab29963cf9ac18186d80d657246aaca6e01467a4f52c70b89008f49b279c7a3b" name="libdns_sd" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="28e262291ec8bcdca9cf621cecc137243bf7b8113fc31b070ec0fd84caa899be" name="libdns_sd" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="e19dbb0e2574ec7b77e6e4ced07824a6e21ca418144b2cf02ae88aa1902cf778" name="libdns_sd" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="a21638993432e5ba5a2e6b59e8683678b4a881f32940f0e0e85808a708400bd2" name="libdns_sd-32bit" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="aae77a238d1f1d6d3080e2f9ed5edfbcc6d6754b3160ac0d50f02fe60631dfd5" name="libdns_sd-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="56854c4a77f298b9591a32ac832b241ae1562e18d855e14b6f8a5f4b6d99e8f9" name="libecpg6" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9e95a27f2b97c3fc02b35c6b58e620df7b94b6087c2deae2ce2b9c696ed8aa59" name="libecpg6" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a57aa85f272602232bbf6cb4c7827a466f1bf84dc1e38620d0b732c4261db973" name="libecpg6" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3cd3356412c32d603406a747cd3fddbb1b634721a8e3095f3bd0239408d37c03" name="libecpg6" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="8664df74e6f47921776972e89f1e9b84349e11b0c1384013c0e30b511a89a688" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="37ed1ff7a1b2eda2dc9d033cf98500a7fb469b25ae9091ef710c4360711acc27" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6a2185fbf89842e35300245eb192e024d804edc612327a51068486f15ed266ee" name="libecpg6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="86efea72854eac9876d4c37fc45b5c8544f69b6ddf88910229669dd997637e67" name="libfltk1" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="085888ec6f90707ef69007edb1a2dd1e5d4d1ac9d0f2fa007ff8bfba4e16ef25" name="libfltk1" arch="i586">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="bbccd4520897dc5691eab44555260046049f142825f56aa4eacf70cdf7772810" name="libfltk1" arch="ppc64le">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="4381e2da62ca04d339cdc36de181f563c2387324d5b3d74d027aef0b2c3094f0" name="libfltk1" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="a3bec86f20541ea9351aa19ed01f7e708b3afb796db39b97bd119b6665e5e061" name="libfltk1" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="116aac489e0571e5ec6d5dda2ffd19de61ff726ce6f3c9d3c1c340fee9dbceda" name="libfltk1-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="cdf0c9e181595204c51d10b6eafefbf97d2fb2151a26e22de4265b5b7b97fb07" name="libfltk1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.3.4" rel="5.3.1"/>
  <changelog author="jw@suse.com" date="1362484800">- added a fltk-devel-static subpackage to transport libfltk*.a
  as needed by Documentation:Tools/flpsed.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414238400">- Correct -devel package dependencies
  * /usr/include/FL/x*.H needs x11 headers
  * /usr/include/FL/gl*.H needs gl headers.</changelog>
  <changelog author="p.drouand@gmail.com" date="1421150400">- Update to version 1.3.3
  +Very much changes; please have a look on CHANGES file
- Remove fltk-1.3.2-underlinking.patch; merged upstream</changelog>
  <changelog author="dimstar@opensuse.org" date="1422273600">- Add fltk-1.3.3-do-not-use-internal-ABI.patch: do not use internal
  function Fl_XFont_On_Demand::value(), which changes ABI based on
  the configuration. Add a fl_core_font() getter for the same.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- updated to 1.3.4: see CHANGES
- remove fltk-1.3.3-do-not-use-internal-ABI.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/fltk-devel in order to fix build
  with RPM 4.13.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1500292800">- Drop patch fltk-1.3.2-do_not_add_unneeded_extra_dependencies.patch
  as upstream closed the ticked stating it is wrong
- Add patch fltk-1.3.4-fltk_config.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500984000">- Trim description, drop TM/R marks according to guidelines.</changelog>
  <changelog author="pgajdos@suse.com" date="1517227200">- added xcursor dependency [bsc#1077881]</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619179200">- explicitly pass -fPIC and -pie via CFLAGS and LDFLAGS to make /usr/bin/fluid
  an position-independent executable. fltk by default passed -fPIC but not
  - pie, which breaks our gcc-PIE profile. (bsc#1184122).</changelog>
</package>
<package pkgid="e3f2eedb2c77d4fa77b09e8ad1503aa542f30aba99c4cfa4dbb60854e7c287be" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="179eb9dbc1b399e8e75498535eb67ffa97ada7816442522c6266ccbc720f9752" name="libfreebl3" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="82cd9a5b365e035973a28318ff6aec894b69ca6deea2b6f0c059e91a3fc28c9c" name="libfreebl3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b8d0234d75e53a87e6ac0b356dd6cefb6afff77850d84dfd83a534bb405c516a" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d94702976f5b9365a013bf6bcb221ff4565f8e4579a0a5208cd5d4a6138d13ea" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="340ca067124aae14d0ab1cbc62995f67a478396d2a4e7081fe85f0cdc9574eef" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5714fdc4d45a1ae2dd4c15dc3bee0b1ceeba1050d2842741414b2dabad57cff5" name="libfreebl3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="eb7ae983fdc63fae80f57687f446fd26432665ed739b16b3524d735830471420" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b6a3d569caf0a1df38b7158255f351ea2622dfb3ccd5e954a29d5db8a8dffbb7" name="libfreebl3-hmac" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="dc3bee48ad8759c22706a66445a552b67cca5a9e8490829b47b9983493027baa" name="libfreebl3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9a6e1692b1b09593e90581592c35dd2617681591b9c1677e47f07c16df59df85" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="01521e6112d54822c8e5af02eb0e4bb334b9a14502b82c77764e356b4b622c52" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5f2d62255474fca2e5e2bd3ed016b23583cd7838d0b3bb0d372dc32aa73076b2" name="libfreebl3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="53d06ef44ced2c1c26f030997e864af670f63fddc38095f2f48f0d9506b976b8" name="libfribidi0" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="357a5a8ad1eddf63dd292f784c22651cbf0b49e43db413ae7952e49620ee1e46" name="libfribidi0" arch="i586">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="5f9bd58fc2801d5b0abb7a3eee1537febd4b3bbe7081233b52790d368a399cc7" name="libfribidi0" arch="ppc64le">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="1dfa129c1abe9d5dff8177ef440741cc141f7c44baf7b3c75a6a4ff52191e44c" name="libfribidi0" arch="s390x">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="abb44bcc438f43916420b26b6e77d258856f81c710df852f1c4c7eb82579d112" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="8626d15b0b868af7115c7e68b0184ad834cff15bcd93619912642c0570202566" name="libfribidi0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="80f58c50a803c1f518c6a7a3cc905768dedb2faa7a3c74acc79ff6379c091957" name="libfribidi0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.5" rel="3.3.1"/>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="zcjia@suse.com" date="1620820800">- Add fribidi-CVE-2019-18397.patch:
  Avoid buffer overflow. (bsc#1156260 CVE-2019-18397)</changelog>
</package>
<package pkgid="e39a25eb61a1f39576f08fe5b9cbea2f79b94ccfa51b0c464d273f221f68899a" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6194bacb1cc7ed1f1d3facc8c47b8fc9bd13d36744c021a584bea84834f2a448" name="libgcc_s1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="70ca65b22f7caae2587900569bdf22a495d17accada4256c717f39213d832595" name="libgcc_s1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="25570ced807419610d7cd53eee5bcdc4a9ca8ea66f978debc90f1abb19bc66b3" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8cde98a85cd6cf345f4634fbb519dbe80447257a9739ee76c7c9370016fd507a" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d63af47ecda79656684e03639ef4fe1fd8af64509ce094dd26d6540bcb142637" name="libgcc_s1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d19587a84203593292abb6e69cffc1f01b2a204dcd31d8460730cb6d60ffdc11" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="81987076f5e655c296d52b4435fdbc5e1febad8b2293d9a5a6f0353783728e04" name="libgdruntime1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f9b9b7147469298866ab163eb87ba233f79bd4ac7aad734691d7606faa255174" name="libgdruntime1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e681510a77d040240e259152a33f09f4a048e9f1328014a8283e5ce1151bbf41" name="libgdruntime1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="50445a5dc01c954550b8d37a10c601506a4d803c14da9d39ab5cee5ae1f6253c" name="libgdruntime1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9960e76a40583a0892d9735a78fedd703e546978382e967dfa6bea6ed558756a" name="libgdruntime1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f3623d40c7e8cdfa26022f85c63bed428ea7817f3da69f352366e7033e2608d1" name="libgdruntime1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="09f1b69d68381ca51b7f8bb1ebb90e52bf0abaaf620e184d0a000947f69cf748" name="libgfortran5" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d623271657c58aa2e4dd6e2f63734391345d0d40408f73baecedddcd143f80a5" name="libgfortran5" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c7cc423fe1fcf82f6942e1902a01bfe43157a47dd088d6fea6bb38891f7f0eab" name="libgfortran5" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8fe2fb6c85a6d2d73c306bd84d55537db4e12a24543b2d23a6517d133509a9f9" name="libgfortran5" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2bebc9836a0f318336d5f36accbedb9361907e2abea6c3d732389444331bc0ad" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cfae885bd3bbffa774130b327829d8ce6a98eb9c666ea6fa0735c9c5a640a8ee" name="libgfortran5-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ad59168d7dc892c58d7a2897fbc98774d4d067dde2e39111ad85340fb1a346b" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="51ed63521c35d009d6ad12e7be55de984f9c8bcad72260cb74c8b99390e4a7b8" name="libgnomesu" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="6e30f401bdad08bcf0583f9aed36242c33d961953c36315c5052032288ea6aac" name="libgnomesu" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="fdb3e3ecf048a81781deb108ff8907447c50207f2bb5e1a6676bca55610c29a5" name="libgnomesu" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b012d7d746700918f2b1ea20687db738ed2049932b04f3492124cdb5a3902bb3" name="libgnomesu" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="36bc17b388d2046eb9db165051d1cc2713914d0e330b14686a8d03dc3e1e43af" name="libgnomesu" arch="src">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d3363b164c74a47adc63025b1cfa68406b67af6a7b96ef1062073271dd4f8a7" name="libgnomesu" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="af6e5a4b158cfa106367c66e6dd25ce46a3cc8a7346825667b507cc1897bb3d9" name="libgnomesu-devel" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="cb1cadf9c17eb20583f76d9e4533db48edd49ff7d58661d29f55353ab6e8d614" name="libgnomesu-devel" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="f8c67ead921f4cf5cee4e34ca6fb5f3fd0a926dd96b35cedb1dade7b214ffee0" name="libgnomesu-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="b08d978ab0b371a1d7b36c0fdc6590a247cb1bd1d6f377d2f0625843efc02101" name="libgnomesu-devel" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="0d703e96473dbe8f569e3f386190e2af699ced52f25c14d190c4063d7138ac09" name="libgnomesu-devel" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="bf5a87a4ef21af1064759366614fbf9bbbff4427506f07a1958d3c857a252a53" name="libgnomesu-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="afc6188de55946a77bdf0dad70bbaefe2c72f586db466942eae8636073af067a" name="libgnomesu0" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="2748049f6b9d329b298c542945be4ea2b5e76ebc230c9a54c3aa6ec500337890" name="libgnomesu0" arch="i586">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="a1de672564e4b5e831fb65750d375484f8c1427f553f8800308784f298bbce72" name="libgnomesu0" arch="ppc64le">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="09bbfe4b9d215f65fbad97f497f8798749eb42e87c0ec920a174c7b331286d73" name="libgnomesu0" arch="s390x">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="53b1ab60e4e7dd795c4ab2014cd69438d5a86b5590d2cf9ee5ee2cefcd360215" name="libgnomesu0" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="3.6.1"/>
  <changelog author="mpluskal@suse.com" date="1498132800">- Update to version 2.0.1:
  * Update translations</changelog>
  <changelog author="tchvatal@suse.com" date="1498824000">- Version update to 2.0.2:
  * Automate the package building in travis on github
  * Fix the version stored in configure.ac</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="sbrabec@suse.com" date="1554206400">- Update to version 2.0.3:
  * Make gnomesu honor /etc/default/su settings for PATH
    (boo#1131339).
  * Updated translations.
- Sync PAM configuration with su.</changelog>
  <changelog author="fezhang@suse.com" date="1565006400">- Update gnomesu-pam.pamd: Include the pam_keyinit.so module in
  /etc/pam.d/gnomesu-pam to support kernel keyrings (boo#1144048).</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="sbrabec@suse.com" date="1584792000">- Update to version 2.0.4:
  * Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588248000">- Use %{_libexecdir} where appropriate (instead of %{_prefix}/lib).</changelog>
  <changelog author="sbrabec@suse.com" date="1600776000">- Update to version 2.0.5:
  * Gracefully exit on SIGTERM to avoid leaving behind xauth
    temporary files due to skipped pam cleanup on shutdown
    (bsc#1176514).</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- Update to version 2.0.6:
  * Updated translations.</changelog>
</package>
<package pkgid="02cedd1f8a67d1a5eddde458b69ccc78854dfc0f227fce04caa70f933df09c92" name="libgo16" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fe858c30f25972619af6c76955048161ae7fa0beac30ccd58589287114ba6f6f" name="libgo16" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f9dfdf39e5087d3c698c4d5879278e227005566810884981f5c1bd1b79556d2e" name="libgo16" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af6114ac513f2b8e8fc9cbd4580a191051ac6202f639c5e268fd18ec2ba1e199" name="libgo16" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="066a20cd7c6a180a51228292acac6ea76c21b581ce3eefdf48df7f6ec5e2aa44" name="libgo16" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8ff50f33f63de8e21eacd8b57945966c3fb790605981cf1780eb61840a0f8ffc" name="libgo16-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a7d5ed08631f416391e187ebc4663b7358ab1472582fda0b7c81be863008217e" name="libgo16-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="98b05fb0457ab4c69a99e9971795837788d57ed7fd2edef1186571d732398b73" name="libgomp1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="84a0b9f529b8d943f5f30ee4e152288b54fe026e4b76040f7e33826c824b85d4" name="libgomp1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="78f17c1cb8b55f93e207fc7678daf5b4ee1f3608a57422d7ab715e9413471f36" name="libgomp1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="db5e1dc67f143c5916b58244081cb6c75545b6d817fe9addca006383952c3af9" name="libgomp1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3bcab0a76cacaf5b10843b7f80d86c7d19e0e329041c88d6d644bc0e7ad9c719" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7a7a05116bc817e98410b613abd65e76e1ab9a7c6e7ce922726d6edb3f64a4fe" name="libgomp1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6d97aa9d90f62f7f5bd098795795fe9c95515fe5b3922bd4662024339e6a7480" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1c49c14a51340241f2adcad92e44822216137c4e3e7dab89695622128160e787" name="libgphobos1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a51350d21db19e21faae75588f826d5ef0fd5da259158065fd2c476ab902b852" name="libgphobos1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="292278aa3936d87f4464c6ee8003653f18a1292b0cc379a81feb07be37bb7329" name="libgphobos1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1ef21546221d3cffe21e8396d4802a7492e21d81da04b606392f76d680db9704" name="libgphobos1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cf109908df12a2bf71fd96dfb2aeedf6209ea64356e0adb29303c18687209464" name="libgphobos1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="682255547506945b25b13118e3f179a06ead75295abfc773c569187c36a9272f" name="libgphobos1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f0c1608d5325333008198b510218a96842e2067595857ac3db82f1268b25d7c0" name="libgpm2" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="723ae651c2ae7b2fdccbf611e676ec92464b118de19e78e3777af608ae486759" name="libgpm2" arch="i586">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="4e36858a260d122a62ce4107aa1b83758cb205eed0af06b0200cee4ea58335d8" name="libgpm2" arch="ppc64le">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="344cfecb4092eacfcb0e3dfdb7061b4d58da7352a2e51353596d30a838d0040b" name="libgpm2" arch="s390x">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="03cd24c2674ab1808db270cd2c74dd059258f7a73d73530a5f59370557923312" name="libgpm2" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="3c22f9398dc233a89f1a80f11686594f1a2149c3da0cb1a7cf7097458125468d" name="libgpm2-32bit" arch="x86_64">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="34641e32cc0df073148cf520ad5df8dc6f0d1750c8895e04ca4870476b72cca3" name="libgpm2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.20.7" rel="7.3.1"/>
  <changelog author="pth@suse.de" date="1452686400">- Add %post and %postun entries for libgpm2.
- Add a current version  of GPL-2.0 with valid FSF address.
- Add gpm-fix_fsf_addess.patch to get the current FSF address into
  gpm.h.</changelog>
  <changelog author="pth@suse.de" date="1453464000">- Remove dependency on aaa_base as using %{_sysconfig} instead of
  hardcoded /etc shuts up rpmlint.
- Use %{buildroot} and %{optflags} insead of env vars.</changelog>
  <changelog author="adam.majer@suse.de" date="1497268800">- synced SLE .changes into devel project (bnc#1041340)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update description and remove two unnecessary ldconfig calls.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jdelvare@suse.com" date="1578571200">- Add back support for the TAOS evaluation module to inputattach.</changelog>
  <changelog author="adam.majer@suse.de" date="1579089600">- gpm-fno-common.patch: fix compilation in Tumbleweed (bsc#1160873)</changelog>
  <changelog author="adam.majer@suse.de" date="1615377600">- remove unnecessary StandardOutput override in the unit definition
  file. (bsc#1182147)</changelog>
</package>
<package pkgid="b700b5cb8c83fef3d1b7fa8ec7413120bf2e327c9663b86491a6d9301033d168" name="libgraphviz6" arch="aarch64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="25652310d191f804cfb2c1f54cdee3151ae9ee51d80a72ea575a088f5ae63447" name="libgraphviz6" arch="i586">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="7a22961d8b3ef89d4d6d703a30e204c340df6a2dbea6ed670c94f04e762dec53" name="libgraphviz6" arch="ppc64le">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="f5829ca540fff3381c773b8c766c235e23409da7cd21e0ab5e924ffe2062e0e6" name="libgraphviz6" arch="s390x">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="a20aec17dbfc1bb376df4a4cf64b41d959e8856c06be2f31108f76de3569bb84" name="libgraphviz6" arch="x86_64">
  <version epoch="0" ver="2.40.1" rel="6.9.1"/>
  <changelog author="tchvatal@suse.com" date="1501761600">- Drop smyrna and gvedit separate spec, now handled by
  graphviz-addons
  * Switch graphviz-gvedit to Qt5:
    + graphviz-qt5.patch
- Drop graphviz-plugin subkpg in favor of graphviz-addons.spec
  that is generated from graphviz directly
- Make sure all patches are applied also in main package so none
  get lost by accident
- Refresh patch graphviz-plugins-fix_install_dirs.patch
- Make sure graphviz php plugins are generated using php7
  * set the php7 path in graphviz-plugins-fix_install_dirs.patch
- Remove tkspline from tcl package as it is no longer shipped
- Make sure the pic/pie is enforced on all the libs/bins</changelog>
  <changelog author="tchvatal@suse.com" date="1502107200">- Add bcond for java and ocaml that can be overriden in staging prj</changelog>
  <changelog author="dimstar@opensuse.org" date="1507118400">- Exclude %{_mandir}/man1/smyrna.1%{ext_man} from graphiz' main
  package, since the man page is packaged in the -smyrna sub
  package already.</changelog>
  <changelog author="pth@suse.de" date="1508760000">- Replace the recommends for graphviz-gnome by a 'supplements packageand'
  so that graphviz doesn't pull in all the X11 related stuff on a
  machine without graphical desktop (bsc#930442).</changelog>
  <changelog author="pth@suse.de" date="1508932800">- Remove pre_checkin.sh and graphviz-addon.* as they aren't needed
  anymore.</changelog>
  <changelog author="pth@suse.de" date="1509019200">- Reverse last change.</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Disable building the graphviz-ocaml package: we have no consumer
  of it, but not building it allows us to elminiate a build cycle.</changelog>
  <changelog author="christian.voegl@suse.com" date="1555416000">- Added graphivz-malformed_input.patch from commit  839085f8
  to fix CVE-2019-11023 (boo#1132091)</changelog>
  <changelog author="christian.voegl@suse.com" date="1590667200">- Added graphviz-null_dereference.patch to fix CVE-2018-10196
  (boo#1093447)</changelog>
  <changelog author="christian.voegl@suse.com" date="1620648000">- Added graphviz-out-of-bounds-write.patch to fix CVE-2020-18032
  (bsc#1185833)</changelog>
</package>
<package pkgid="b7dc6ac057c99a6b2a336e27d887257c06061cc19271448ff32bd077e7309062" name="libgstadaptivedemux-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="1fe7b61389622b4f3136d362b90dc7cf214f195f49399e63fbf9ab5bcf958e07" name="libgstadaptivedemux-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="316c3ff65151686b16edd90e553b9d719641426cff73cbd7cfde2a8e08af55d7" name="libgstadaptivedemux-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="b46746e7e30a17093127e140f2ce041ed47f524a2a7864fe7ef0cd0d8394de32" name="libgstadaptivedemux-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="0de5e1b8956c65e96f07f5e582a731fd60dd93f2285232361368adc3462057b6" name="libgstadaptivedemux-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="2db7239d2d033aa50328ba89917d974b5fdce6a38dafdc860409c962c08412e9" name="libgstadaptivedemux-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c0559a090e104a8d260b4374ef31687efafa3f2919dd50d9ce21d11ef3d997be" name="libgstadaptivedemux-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f9e9918d3310be4a26877b2597aed897e3943772a8167cb9ca53bcb57b871a96" name="libgstadaptivedemux-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1d0a473d15eb463f4c3f83ba54b8582ed2d9a842ecdd764ede19ee7fa1e1ac16" name="libgstadaptivedemux-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="351187a107903515d1eed7b68a71633a2b4947b8ce8f4e92c34ff37c27d2f016" name="libgstadaptivedemux-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="54596b6f88c63b54591a9311da02316207112f5b44983dbf7802272f0ea180d5" name="libgstadaptivedemux-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="17593a1ce4e182eb424fa1314b17e1fefc22e840a4abce0c498ec2b35aa850f8" name="libgstadaptivedemux-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8c6287fdb9d6c48ea49392cc6452cc342b6363ece85703bead22536c1226de27" name="libgstadaptivedemux-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="c27cc755906e855ef1c325537db119e0c7f6a0d8bee8126352efd892ae0d174a" name="libgstadaptivedemux-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="1b629aded0f12e9c8a3422ac95f4eeb85b00099f551f64a92b02f930d35b16bf" name="libgstadaptivedemux-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="32e8c7364261ec2237373059a6a298c005d1d22b279594d1148a0c9a32d3d6a6" name="libgstadaptivedemux-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ab011573e823fac00aba20dbee8314b33e7bb0ec8c2b53dbf387c219196f03a6" name="libgstadaptivedemux-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e048857e24c496e339895d7a1b08de5b6e23161b87491b139a6152127d3e15bf" name="libgstadaptivedemux-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8bf3c37a5f2d2817b8ab4778c42cb28eebbef7dff176b9f0c1e8a4c3d9d2ce2d" name="libgstadaptivedemux-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="958bb628a9df727cefb7527a5099cdfb3ff1701bed0cae012da2afbb977ff26a" name="libgstadaptivedemux-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="438ec821deca27215b7f9382826134db369b32177887f7e44bd0acd9037304ff" name="libgstadaptivedemux-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="09dc3913bc0e88534527d822ce5e8f8c1ebd6a932c8cfcf974812381f3a63cf0" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6fb58181d462bbc7a83540547ec37eddfd4fcac75dd5fccd688dcb11631f726d" name="libgstallocators-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f48b6991c62ef21ff8c60d86d0ea7eba9dfd70a4efa00da90edaf6a87b24f1ee" name="libgstallocators-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ff97feb4bd8be36453c07baa99e7577b255c19258910b27554eb0f46358941ce" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d3b2fb83dfa9acbbbe99a40290b9d3b6cf8304d0e84b8463bb1b31e0a103ebea" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="38d06d6dc690369940b60cbf483ce80d2768f56dbf00409801db59898df26793" name="libgstallocators-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="6a531c771e2f49fe6ade1acf3f4b79ec428f6c8de8f31be3ea539e751d2ce824" name="libgstallocators-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="869944fd310da72f93fa6002d8172d3a9c78f05e48c2db4f4cfd3a5d373e12c4" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="115fd49d967073cf2e1dc7a3eae5e43b65c84a6a67043b78833ed2e3214dc134" name="libgstapp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d7084da52e8b5b3bae403ca00f34dab37f3f1995046fd226294c158df4e1f1e3" name="libgstapp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="99381a4b60441a7ec61fa65bf8eef7a8ba4241852ab31ac03cdbc843bde26e5f" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="61a228c10cd96ee789982a92c6377dd03841114e38e553647dae582dcac59ff8" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a5650037004016973a4d9ba08c40f34c0807a4f1a5f863817d3b93f52e466ce7" name="libgstapp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3bafd8e5924c28e9b248b1e09f0685cb315e88e7d3520998a38de07a188aff87" name="libgstapp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3cf31e702b88326a780f5421f5b684c63e749f9e604122e11ae56171afd8721c" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b0b0403554e2a54ba9285b0beb5f9987cb175cf3d68e2496b75700aa5b8d8527" name="libgstaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="89b76113217b0549da88e9b546b2adeefc44b94e7c7c0e5c50e04b36a892640e" name="libgstaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9273b1e058729d8a7f08216fafa91b29f97e31174e83af77c7a75970053a32a3" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="17a25cde2e5681f2ab6a11cf45de5f143222d7e63a8beed67e3a24e2d91ee3dc" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="90ad64856637d3b946d2b7a7c1a9d06ce03281a9d681df81e4a5aba8e5eb2e69" name="libgstaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="639b185d6e461f70fe6d4a2495c97a3ef8bd99c131dde3b6568f2511a322c1e8" name="libgstaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0fcd6b7a13ab9854ad43506dd5fd78b5ae35d55b04b0a3cd7803733552197772" name="libgstbadallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="a76efd7ac5c4d0c416980a29c413b078312b26278e5a11682afe3ea64e90b733" name="libgstbadallocators-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="4ce49c6e8c03a239cf0ed2ee3b82021b6f2f657b0d0a288a22ccfbdb25aa8888" name="libgstbadallocators-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="837c180cdd1c49b57ff4c2e31d6d68616f5f54b5549d22c512c82d7348688592" name="libgstbadallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="d3bb9f0cdc3b82c2dec1d2e12429495f9f9c1a7c4f124c430c1324db8fb0a1cf" name="libgstbadallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="69d70a620944a6a71ed036ebdd8c966f4b25b63b9e5b967edff9fc93eaa0f8f0" name="libgstbadaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="424bd4d2090132bcaeede855d2e48fac8d857bdc9230a0d11f8944e4206ba05a" name="libgstbadaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="e2d4cbf1621dae82f35acce81197208ba56bffb82e5fd260b41631729beefaef" name="libgstbadaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c6a49b6686f764ea780bdbe0aa9c22b9492e4d425a98a30796c3f383953d89d1" name="libgstbadaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="957bef8af2744e39df021c1c4307b40338122864d259984c42057ed4ed5098ad" name="libgstbadaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ac4f25ce63a2606984d546d7cda30796bcfe06ad2c6c72e3c09f6677bec3561d" name="libgstbadaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f9fdef8a62f24f7fe847d0120a8f50c1434489e3d5f02e7a2f5d81bb9bdeea28" name="libgstbadaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="382b8fdf503caeba8ba59c9e268f6b0b2424db43fdf6aed46e9e9053119229a6" name="libgstbadaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fda0c0b04d02b057432186e3ac280b31c94502229cf54a6297583bed5b2b70f9" name="libgstbadaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="342ad74b2c39a7d9049d336f9c35aaae42de9ab73dfde2a734b93776a6b34782" name="libgstbadaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="3d6c9bdaa1f1ade8f96e069b79f20918e625235246dda86ad6a1b1ad6c6ba705" name="libgstbadaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="bd47faa5032f74a917f585711acb52f36b212eb4c64c157c76d9512880c36f1c" name="libgstbadaudio-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="a347e042bb2d2225f367362499d27c6622978923490c413f884cd03bea799f1e" name="libgstbadaudio-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="7275e8a4e7c360c49050438021d4f90df5a466fb1f4fbc622755cd4692d3c6b2" name="libgstbadaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="be3e6d732e817bcba9142f7917043ac76f30a2a4f5081292fff8179b7d4cb2c6" name="libgstbadaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="e70d3fb6ed2601ce35a12a4cdc99082ed880cc521b1fa7d7ab965d337f6006fe" name="libgstbadaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="6a0c57f0561deb7b749f6a06601cfb3db356deafca4ad798b8adbded6d2bebd2" name="libgstbadaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8f94654799f88a1762924a5fe2e77ffb76acfeebad86732db9a664e4efa03e9f" name="libgstbadaudio-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="47e510cdd3140ea8b041554a64c27fc2227b6469873532c685d8ca4763cde0a1" name="libgstbadaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="260c5065e98581eb0c6a1aa22ee9c11d1aea150ae843ff0ffda5e635f2417ea9" name="libgstbadaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="81d549364b93ec238473be00e621c19f67eb1b2807a5d38961ebea943c53d9c3" name="libgstbadaudio-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b29fc09f3c9cdf4f921bf327af1e937e4341f449d13bb702f09722ae051879c2" name="libgstbadbase-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="5e8d7a91285a62db597370ea61416c2d13601bf64a06362a43ad12c22dbcc52a" name="libgstbadbase-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="4cfed5b6bd45ee69082750e9883bf68b5ddd57aab3735c3a8281d43adcc871dd" name="libgstbadbase-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="399580c43c998ca3a51d53efe33c3d44556dfc010ca670109b380173c6e5e9ad" name="libgstbadbase-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ab21001878a84eb207c391dfeeaa1ff7565524942d1a0ec0210465997ce7491b" name="libgstbadbase-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="58007a5f52c4ce721dd079b515f30c1d3a49942e33353a381beae7b9c87b7e25" name="libgstbadbase-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="e361c0dd370deb360369be38a28a5f93d8178cd91088ed02c53f1f9f78a2f716" name="libgstbadbase-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="d1e1b147a3ec8afd444e31e89461e59267c1559be45cbdffd1f1a662fa2de13c" name="libgstbadvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7b69bd74cc5e3c124bf301fc4087ff3db233c113795a5e548daf196c7140a5a6" name="libgstbadvideo-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="fd5be3f866b3fa5d7a570381661a4f61134f2be9f0aa24de3ce24466c435fe80" name="libgstbadvideo-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="08af5360f91766a374da03212dc833795cc7a00c51cf64944f018fb1a1174dbe" name="libgstbadvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="32dae2f25a2f8488cca7055191ef1c9882ff9e47255ddf49107b7521f9aaa605" name="libgstbadvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="497932fa4bf9d480a92ee7f855491da69d5670d11cfd57a0a4e1801b9723934d" name="libgstbadvideo-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="63ade9dc9a955b57305b4f772eb22af7b99b623aa517cf84795ba416b27b3a19" name="libgstbadvideo-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="59af48f85b5c459ed48a5879984e75a1635eb5c15cd95ce0a327a34b775598c4" name="libgstbasecamerabinsrc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c2a87fe95cbe665952c68135b996ca8aaf2c7c7c255196dafc8732d0fd2de4d9" name="libgstbasecamerabinsrc-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="efc531edf42bf8b31b272b44c15bece822c8d42f3ad2678e67191c1de5992fc5" name="libgstbasecamerabinsrc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="46e8f13921f7a0f9506024bf06f16c9b7f65f3602093009017e2690fb0172f1f" name="libgstbasecamerabinsrc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="847b81bcc3db44d38dbe95cd4a06566d973c9692e60904e8aba3cccfe725d25c" name="libgstbasecamerabinsrc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="9d9790253021370b8c3b06646c250d422ff551d2f5d0a3f6f8226b93aad870c8" name="libgstbasecamerabinsrc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="04685abb9d928bcf29b9581543a3fdadd8009a2bc0e73574a7bcc7b06d7b4849" name="libgstbasecamerabinsrc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6eb9efc8563cdfdc5b23da537b35bc70cc5d84103b53250c3218aa1798d119f1" name="libgstbasecamerabinsrc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4de5d17c737508faa3b97010e2946f5152160323cc12c51dfb67a6c6218332b7" name="libgstbasecamerabinsrc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c1434f98147abe7897d769b91dbc20af270feb52a4eb99612f153049b034c1ea" name="libgstbasecamerabinsrc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="2e9b4a8d3fe2de79d20c674ac8720f98bf1a1107f76dadd5d0a0d67011432ebd" name="libgstbasecamerabinsrc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="13143af86970863d32f53e139cc83b01cf732e8effbab8ec889e1bb960840c5c" name="libgstbasecamerabinsrc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="68c381757b91b5f29e1272a3da2d48d5e3af08a3311d209313057c18c0c9bc79" name="libgstbasecamerabinsrc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ae3667f9fc3fb6e6dd9e0f8c5ef160a2cc634e9197aa817fea362fde5d427d31" name="libgstbasecamerabinsrc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="18fa80b923f3cbc570fc9f508c7967fe9943d244107bc326de47c8d8ed9c4c36" name="libgstbasecamerabinsrc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b97025aa598ee7b15a280b7a65af1e69cc61c232937b5a3be6c5641c2e063a1e" name="libgstbasecamerabinsrc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="d18eb2be28b7265876be0ed1f431356b62c66817c842f32718fe79ff399a300b" name="libgstbasecamerabinsrc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6343473443240e01d4b996f782923db347227520bd9996b08a8f88bde661ab2a" name="libgstbasecamerabinsrc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="5833cd548c1950c40c5b5e15909f809cc1d0d12049d0d9d536df076a5b6d8ced" name="libgstbasecamerabinsrc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ffe40fe01c2d4908f8160ef863e0c8c7d930bc50dd4a7b534a4c652d02c68236" name="libgstbasecamerabinsrc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cd57e21c21b9027704945e69c9850da05b66a429774ac9c9a54b8675afcfd427" name="libgstbasecamerabinsrc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="d17fd07e1a016f63d5341e6fa8f44aece7eeca57963c4516b712ed97bc9080d6" name="libgstcodecparsers-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="b74c0b522f1910ed05d9535ddd7270796afac01e56f047edb154e50f9c5d680e" name="libgstcodecparsers-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="bd0066a8f2611259bc9615b19d7eae51920f744f4955d280ff82ce6c5e7416fd" name="libgstcodecparsers-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="8e47195f1b6131a0cc8def99a90bfc145b41e1323853ae430c03ca8e7cce31ab" name="libgstcodecparsers-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ffd0ef79caba4e7f6a4ce077d491e309dea4446e4b51050dfe35b5e66d3d8bba" name="libgstcodecparsers-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="de60b463ba5352f2683512fcace099a4b6a7bbf1f300deafba0276b09528f4c8" name="libgstcodecparsers-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="55188331b678b2b6f02db1ed89fe6f047e3388b630e7f98b4ac17360a0184de2" name="libgstcodecparsers-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38700ff09ac1e19d905f441ff835fe7e92c41691d52f647cd35e19dc6629c9b7" name="libgstcodecparsers-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5ea45ffea2118a51e829943e2866b1404e7fb482c1ede92bbf8dcd96b5cd9061" name="libgstcodecparsers-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c11216b06e0ef7955520787c5273ac6746323b3fa8c262b2459a06684d6e3d66" name="libgstcodecparsers-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="99a494af10e4909f43d5867c0ad624ae39f6a2e1086529d94fac56ee6a635424" name="libgstcodecparsers-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="cabc683b4bbed5bfeeb16ff553e254b5af3b80bf653f52599283a33ee49044fc" name="libgstcodecparsers-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="10abf5045929ed84c71750164ddfcd1dbd6880f2eafb12a4218f3cf93d3968a6" name="libgstcodecparsers-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="421bd1e515f25e971d9d477491acf9defaede4678afa2ec40f4ae7462243be00" name="libgstcodecparsers-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="c5a4a017a2a855a0b38cf5ce1adc8dce7ba3aa7f078572578e3e93dc48c2e6f2" name="libgstcodecparsers-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="a6bcddaf51e69def2db60a4c90c57bfc4a3e3a31b6b4df84618b347eca8a0e03" name="libgstcodecparsers-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="e4629388aaac6a47c1d3e85813a018836c437e7fb44c77e56d26a23ed9f1cabf" name="libgstcodecparsers-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="37684375f3f4c5a57c73f16f75842708a4230e42dc6ae2c27a3996cd64a94ba1" name="libgstcodecparsers-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="9adc6d5c0d8be91d44a6ec2a882e7a23c5a37f8713ca5ffaea5547abcb480e51" name="libgstcodecparsers-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="fcadbd9098ae1b79d98eeabb9cde622c5a7f091c3d8de3ba456969adac4c89ec" name="libgstcodecparsers-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9fa0adb41db1c13b2c8dc19c31a5acd2f32a51376d13d9ddd9f990580956ae4d" name="libgstcodecparsers-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="40235f5caadedb55214754c6713399e8bc87c469a0e2dbcc9ae0003b4832b75b" name="libgstfft-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4adb1c1cb84aea08d52ed52b2c3c75f451efb60fe4cb5e45a35477a15d344281" name="libgstfft-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d9f73dced04dbf751e47111ae9a37814ce9c3042530020b403d28ba0d4feada5" name="libgstfft-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="36770dc02f865f96234e2b6636298c609d3bde9833f28a9acf0dae6c6ab54df6" name="libgstfft-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fc42d8f4b4ccc30cce13aef05f68416a6cf07bc75c9402aea56e1eebb88184b0" name="libgstfft-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ee02beec1502889bc88429879c7653a347356433a57710f62db51108d054a0ff" name="libgstfft-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b73499083c5f43c98ffc514dae410e179022dd78626aca6c82236f3752ef0f13" name="libgstfft-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d09ed4403c4580d311c1aa547cd92ea125558c479996b2bd91296e2e97bb48aa" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="09605ad1799d5545512afb22ea79f489cf76712dd2180d14c423dfde2bf9b188" name="libgstgl-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="6ddd78edb4daef9fbefe0ce6db7b48186bcc4451ba37882129c5ee244c74db62" name="libgstgl-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="9000cf144f7be3b087a8584322e913e5d312208a7e16176deb071482f4511569" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f7adc555c7f6acf6e72f49e56f1de4d996f76bd69489319617e570322eb5ece8" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7ca617d93711f58044f9b8ad17ab86a98f789d04649a6915d4e8af5ed552f8b9" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="64aad15bbf5902bcab7199d03379cdb56ceb60a4e713c024bb801e88d7081e18" name="libgstgl-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="607cd4276e62013f74394652e3205651ac5b83d8936cc5b70be2da9042def7cd" name="libgstgl-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="75d6a50d3f8da99d937e57ca559286b8a53e844702940ca18aa2b8bb025cb6b9" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="3a585e6f249f48e2ddd1f53abbfa58d4017014c4c4dd16bf3a85c31d45454a75" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="71578ef57e044385ed71c6f0f775ebc9decc1a8ebfc064d3f850e902c666c156" name="libgstgl-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="53a5064ba1edbbaded3d9894cd7af519dc1590412934fed87f9ff3a2a250acb0" name="libgstgl-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="29a79a5bbdd0df95ccef5b4147749a2468e8164e2480948f8fcaf66bb58f4040" name="libgstgl-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="fee4a596d9fb20235b1d7e7f131e2c2553f01980e4ba4b7980c5ff55a9b1b458" name="libgstgl-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fed6de921dd4bf64554bcd5b5d003ea362ed48a9f9628384d39097ad8cc31cfa" name="libgstinsertbin-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="9350c27741250942e2f50a6005da909090120136b02435ff740e31c1a8f19084" name="libgstinsertbin-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="1dcb92e8eb1def70e07cd9b981b6f1db6c4cbfbd380e7a34b8bbb437bad9242b" name="libgstinsertbin-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="afcadf148fea4ccc45993a238491bd407c7fc832e6c4e46459236d741d74d89c" name="libgstinsertbin-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="4d3fbb3c2259062cc6f02f527ac24b0b37c46496a7bfa1e0b901d2cf91e9ea3e" name="libgstinsertbin-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="53b3fe7cc77048ffd41d4ba121cb55a4bea3bf08634ba78a9e186c5e133e48d2" name="libgstinsertbin-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8875cc229385f139de4eed0880d3e36b756068ea30098274da1ad4a64e055e32" name="libgstinsertbin-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="aa781c3a934bae454a0feb321d09b4d823d9696b6f7f38a50b27a28cd17fe2a8" name="libgstinsertbin-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e62653d34ddde6e3ee2438989e203a7a5884bd74b5819ed10e4af0678fd3824d" name="libgstinsertbin-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="00acd0ed0f6643ef8b7fe797a64ab1bcbf3163f58d071ccef9c53751a5d49686" name="libgstinsertbin-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4a9a237affa33ce44969a158c453f9aacf38f2d94352b9674a66f1af531df09a" name="libgstinsertbin-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="f693ca8d3406e35f83f62195fc1cf00c9b10e68660630c83120a8799f8e40a0f" name="libgstinsertbin-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="139b0af6bfcfc4327426a2fbd0aa5f377503cdebe506bde4637b2bff841454cb" name="libgstinsertbin-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b3421d2743d97ae8c9df803c267593896eda18f9e1772af7d796a2630cdb578d" name="libgstinsertbin-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="7aa01a1dae8c0650addb32bf70790377094cbb876027b045a6729bdeedbaf4cc" name="libgstinsertbin-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="c825bd7b119d108b27debf36f1f6a3f6f40f602064cd42009eb37ffa75d79905" name="libgstinsertbin-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="a983fd8b0392c18e6e564fb884d5090a8c0c669355af4f649f8e1209bcccbdd2" name="libgstinsertbin-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c5bb15cfaeefe09b9b376ba7673559daa1f19f37cb5d8e645adbfbee36a7d89a" name="libgstinsertbin-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8cb2b9a53cc54950c6a10974683a03083b18e1a8bb4b7b3fd83e4f022eb6b387" name="libgstinsertbin-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="fe1bb4ba163f2c464d1f38d7abb290f2a1d2db21b387b4c4fad69709832ffb61" name="libgstinsertbin-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="df90c534b1228cb7eb3706b306dde5f6ab0c7b10516a2f81e8bac92a557abad3" name="libgstinsertbin-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="3d36334185fbd9d289b3f6ac8834ef9b06e0d6730581d3e62045bf54d046bf2d" name="libgstisoff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="22fc9a79ee6289f995ad70f158ce31a07a9678994c0989b7f41b5a1dd143d7ce" name="libgstisoff-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fc03047971874e80c620f45802f2aad9c8542bb3a4602318fce7a1ff353dede6" name="libgstisoff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4084837d951b7be3bb0b99c3f095eee6ea8cca24ac009aa3a1516a8c7eca9ebe" name="libgstisoff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="c27302db659cf7f250748fd04d990f203587c3e8e96379e6a6af635c95a27bd9" name="libgstisoff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ac20fed606d977db2103f6191551bfc3cb53a1cd6afa87c5b9b49f38a02bf0d9" name="libgstisoff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8b1434ef0b75e80bb13117cd183a222cb551ed0b0506add215145f2cfed02f91" name="libgstisoff-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="93f3398d3c9e9062b4c903683c808238fb3adba1589d673f14aef2873a7bea31" name="libgstisoff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="792eb391a68396208d6c5b7bf10f17a9b725883bae4806438efdfa419eb7a20e" name="libgstisoff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="1529c653d2d056db118e024819fb7684caf5fc9f40c53b1ae25f76312f1d61c7" name="libgstisoff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="81e476c1f19674eb1104786c6bf56fa2127292d2a5a90425bc3614f25b786ebb" name="libgstisoff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="a1125c3cdef67f746ea50f3f4731d6aa68fa31b3a3fcd6ed45d49753494f728c" name="libgstisoff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="fc86a50d11cb63b98841043e180c737898b02a9da7d6062410c6bdaa61a01046" name="libgstisoff-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="dc58f46c07695cf45200b4ca3f573727c025ce4b18d57da567543065ad0093c0" name="libgstisoff-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="74c9afdb2c95a0ff02e993e3418ef014921eb4e9aff6370e3124d844931118aa" name="libgstmpegts-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f1e44e8dc4e1576a7a1d19f6270d6b60ff5f533ff002e1afc1bc5168a7c645a6" name="libgstmpegts-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="43c274dd98fe90048c106aad8010d7da495a1db7cd0568af38165a9dbf2d34e3" name="libgstmpegts-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="4100147b803b33c36aee4b51c02cff3aa66f41b88923a1fa9c19471f340e4a0e" name="libgstmpegts-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f4ae3b301f8b21e610e2c419796086e2ac158b9270a188cb315c6020a08432b6" name="libgstmpegts-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7f0ffa40e3301fa24fa6a0a19638bb9eaf81a58099320a7e6b18c51264d1f354" name="libgstmpegts-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="83753695ea1fcacf73ca3ac8ad3bbf3ed77f2c79616d7f1d5bc8ef46168a2d7b" name="libgstmpegts-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="38c5d311318bafc0730c51059b207f4127e6b196bf38146390d1efc23d2f7149" name="libgstmpegts-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="59b5a42c94fe73c27f8a9a1799e0c30c856c5f4f62643051a1bfb6123cc496dc" name="libgstmpegts-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4342481df66082a5c27ad4fd1a721c0aed7e9bb96826bb44d3a28525864b35c9" name="libgstmpegts-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9cb36a934b93a5edc4bb80893652fc066422f77500eeae9c67acc86a60a82d51" name="libgstmpegts-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="7c0cef5bade3b4aec81bc3ad1ee069725c4749af0a59afbfbdff643cf6d3da6c" name="libgstmpegts-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="c81b2bdd88e547628f3c7c72dfa8111d69a7f9170131036088da48540940f6a3" name="libgstmpegts-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="0205ed25d69046f43dd6fb0a6a3ce881991700e70bf9b3b002f2f2804b56c461" name="libgstmpegts-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="5aa2e5661b6c344998c1debf101956bf4ec79c792e041cedf52a504da3baeb38" name="libgstmpegts-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="76bff3d74bb5f989ef36435436c1dc0bec76b5481708d8074a4fab77c1c02192" name="libgstmpegts-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="420ca5de7b160ee88a59badab1694e7cd7737200602cf6d6ab86852cccde979e" name="libgstmpegts-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ce8b4ff507243ea60e8ce82109d56bfc6700fb00b18b8186de4b264524687048" name="libgstmpegts-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="da718f312d2bcd330830b8323aa18883a2d82037a5a0b5dc31168cb5c48b771b" name="libgstmpegts-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="831fca963b1d076c6813ea205da0806ec01caea030544066463bc2e31f34eb12" name="libgstmpegts-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="27520f87829319b0059d6905d61c2c45c4646135d0bfb52bed4a1c5e3b8c6876" name="libgstmpegts-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ea87e239794197d73b483683d12d0f8fa85a22498b356e8065714ce2fd7290fd" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="586cd6d82961d2316b2e6fd846e1629636ca952c08e2747bb2671628ad239335" name="libgstpbutils-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9abed98c643593ef9616957cad9ec53a42c5c9fc2e8412a79010064af3db17f3" name="libgstpbutils-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="96ace2b2fe7bd4b665abc02369dcdcd79e2b23a5562428325eed9ef7a8da06e3" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4b06d118fbbe569d45f4f073ef9852d3564131374d78b6abff172549486dfc57" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="af519131386393ac0b826e5e07bd966dc5914525c9f958819cc57d252233c238" name="libgstpbutils-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="55242b3971148c1f4b95d44d39264fc023e39976d4c3d37c002ba6f5a48837bd" name="libgstpbutils-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c3b471c4fa0c956765bd69e454ae82e1e7c50a796cbff866fdfaf5fb7a839982" name="libgstphotography-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="c120652f849b37bb567081b986b94ecf276dfda1c1395de22ea8e41fb5a6569e" name="libgstphotography-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="addddd7407c82ad545fd1c45bf7961152f2599ca11d6bb0cd54971318e77eb0d" name="libgstphotography-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="486c782828f58a4887c01a5b062cfc142721a5c327624090d08e5288891e8bd9" name="libgstphotography-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f4121e1f8bcad9b5d33c621a71909071c42a7b01846d2a41677d6ba02afcdcf6" name="libgstphotography-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="5092d738be93bed1d49bbbb3d8a78c74e9b745f946536bde69352e5e21ee82c0" name="libgstphotography-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="cbbda40caf6273ae202d10c6bec314ff62a93827ea2fa182a3a939bcd63e4b04" name="libgstphotography-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="9fdf0fb3637692d02fd5812854594175a58e9a088ae6c64e596761c8d7de8f27" name="libgstphotography-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="8fb31a0dcac744a8ecfb0f789c512732d04a65e6044e2580e470cf71a6ee7b10" name="libgstphotography-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1c2a5d8a893a2245f30166ec38450fada51f59f754a8a494ce8e7514ee657aab" name="libgstphotography-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fd1137d395f7e3ce1c432c073a3b196d3983bbe2a4d8356ba071d7b859e8d1e4" name="libgstphotography-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ad39566b52214f6e3f82c268063a89ab533fd45978039024000130defb8c897b" name="libgstphotography-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="a6dcecf3ebe0f648ea629cd92cdcb1d62597069422f6982511caba3a913acd97" name="libgstphotography-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b05bdb4d8f09e406923a842d1bb49b6aabc8ec3a123885bf8112c02614e9fce1" name="libgstphotography-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="5355c70ffdc4a5807e2f5e6d52b29bf8f5e9fbf199eae74be35f6f1923e3f783" name="libgstphotography-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="98be6dec28b89bb1ebc721c697dbd48c20416f06e0421dd52a4e6c3e0ff144b5" name="libgstphotography-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ecb0b4df2249a0fd55967ba20462eb8c6228a7d0e41ce4e71db1429ab7720428" name="libgstphotography-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="4095780750b7d14a78c940ce2b9c152febed9caa43c78d52bdca33f80541e9cf" name="libgstphotography-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="43aa185155ae44460e6bba464fbdbe898af051b6941e0854a4d33763deb326bc" name="libgstphotography-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="d8f2fa02ee94f931e1c5636571cb6ca6fcfd37bcab0db962f9749abd0a585149" name="libgstphotography-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="aba9caf16cac4c0fa07b99742d402d885f593dd9f36fa75b4fb5dec0135706f9" name="libgstphotography-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="4d6f26d03608c9b521e2d21309ed49c068c786b3e0f7e61fd176fdab1034da8d" name="libgstplayer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="1bc19974b62d38b0115ed204f837fb40de4f64fcb9df85a4c43b8d5e618ed816" name="libgstplayer-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="f5a95a5b8234ffdbc23337fb490ec34bcf86b414cb029282f62c946b0ac46d5b" name="libgstplayer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="5bddd0c207125f14c96d544b8820643836e00b529806d8db13b237ddec8c9f11" name="libgstplayer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="255cb7907d9f4d6418a69ad8efc5348465b666f8cfa5715b7dcd30ffd8dced1b" name="libgstplayer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="0b5de3c781167f4905b5c48e1edad875fe841552fb98061d27977a5735dd9393" name="libgstplayer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="710170d9a004899b82843212a24bdcccc850c0ea26288713f5af2b89c2628f97" name="libgstplayer-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="ef7714b42338aefc41b6ba17e5acb5cc38d072b47f7918a6191a2a4852784a96" name="libgstplayer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="04b700728a722fe16eba59662f5f5551d3e9740cd45efb5b8883471234e1cc40" name="libgstplayer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0b26c9d958f8d0e98a10663600be533cc1a339ce3046d58c7ec0a60d8e41795e" name="libgstplayer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fc2108eace06170cdd8f3ec124a771858b623b5d3d2977906890a3fc7092886d" name="libgstplayer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="10297fc62844f89135db45ddfbc49ba049bddd3fdebaec534079c2ee334cde93" name="libgstplayer-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="fa8837cacdcf10337a9eb978cd8170d46beedab09090f7324067da6bd39e70fa" name="libgstplayer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="6b0da806c5c660613877a2be8b272211ffa3de9fae01be0213deac14a5c20b40" name="libgstplayer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="170b64d86a80a23f1ca16de077d5d16c49954b055ed38d38c721300b0d0f498b" name="libgstplayer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="bfbe6e79aacc3b082e489f0b69cbc9492595f924d162abced6991efad3ef4244" name="libgstplayer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="b1de6d77f6703b470481054a3b4ad018695408ffc1775de6d92c69e183d108ab" name="libgstplayer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f1fc55dd6d64283f09f0f07ea2629e09f63f078e6e83df3d45b31a59aeaf4848" name="libgstplayer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="6c3953fc59860a4ea655dd60ac11a5d7353f318ff706c52c2a25439336fe06ad" name="libgstplayer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="5fbbbcc3ed293fa50a8cc3b1d4625f8aa61c2ac54cd5f1db17d904915f2efd93" name="libgstplayer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e848d3ff179fa79ab38b8a0e5fadc625c82fed24e15abec869778a620cbae280" name="libgstplayer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="24fa6369b38c03a96fc21579f421fffd282711a22d8f56e4ba0e73d2facf9196" name="libgstreamer-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="869ceed68b76d1bb6781970ca748ec4832046f8c6bb45f47ba68dc1e33163960" name="libgstreamer-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="67239f6b0acf3c04b76c68e05cab6fb6ab1ea2de4f1fea4a96b44b6340a512ad" name="libgstreamer-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="20c8e08661252d39dc782199395e4edc1c23985ae4d480e0f1b2bbee5e2810e5" name="libgstreamer-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="e9cc57354277fcb01c58b8bd91659591b1c2060b5584edaee795df1bba024350" name="libgstreamer-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="b50f7dc5cd1c7aff1d3333de98275e2e39662937bb547e57c9ef2c88d36058dd" name="libgstreamer-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="4dea414c4d6f571c36ac8eac75e031489f79906c129e378b9273fc8f89a5100c" name="libgstreamer-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1532088000">- Update to version 1.14.2:
  + Update docs.
  + basetransform: Do not check if NULL is an emtpy caps.
  + concat: Properly forward the SEGMENT seqnum.
  + gst: add some GIR array annotations.
  + meson: Fix detection of glib-mkenums under MSYS2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1537963200">- Update to version 1.14.3:
  + opusenc: fix crash on 32-bit platforms.
  + compositor: fix major buffer leak when doing crossfading on
    some but not all pads.
  + wasapi: various fixes for wasapisrc and wasapisink regressions.
  + x264enc: Set bit depth to fix "This build of x264 requires
    8-bit depth. Rebuild to..." runtime errors with x264 version
    ? 153.
  + audioaggregator, audiomixer: caps negotiation fixes.
  + input-selector: latency handling fixes.
  + playbin, playsink: audio visualization support fixes.
  + dashdemux: fix possible crash if stream is neither isobmff nor
    isoff_ondemand profile.
  + opencv: Fix build for opencv &gt;= 3.4.2.
  + h265parse: miscellaneous fixes backported from h264parse.
  + pads: fix changing of pad offsets from inside pad probes.
  + pads: ensure that pads are blocked for IDLE probes if they are
    called from the streaming thread too.</changelog>
  <changelog author="sean@suspend.net" date="1538568000">- Update to version 1.14.4:
  + glviewconvert: wait and set the gl sync meta on buffers.
  + glviewconvert: copy composition meta from the primary buffer to
    both outputs.
  + glcolorconvert: don't copy overlay composition meta over to
    NULL outbufs.
  + matroskademux: add functionality needed for MSE use case fixing
    youtube playback in epiphany/webkit-gtk.
  + tagdemux: Use upstream GST_EVENT_STREAM_START (and stream-id)
    if present.
  + vorbisdec: fix header handling regression: init decoder
    immediately once we have headers.
  + wasapisink: recover from low buffer levels in shared mode.
  + fix GstSegment unit test which would fail on some 32-bit x86
    CPUs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559304000">- Update to version 1.14.5:
  + aggregator:
  - Take the pad lock around queue gap event removal.
  - Don?t leak gap buffer when out of segment.
  + buffer: fix possible memory corruption in
    gst_buffer_foreach_meta() when removing metas.
  + bus:
  - Make removing of signal/bus watches thread-safe.
  - Don?t allow removing signal watches with
    gst_bus_remove_watch().
  + controlbinding: Check if the weak pointer was cleared before
    explicitly removing it.
  + ptp clock: Wait for ANNOUNCE before selecting a master;
    increase tolerance for late follow-up and delay-resp.
  + segment: Allow stop == -1 in gst_segment_to_running_time() and
    negative rate.
  + g-i: annotations fixes.</changelog>
  <changelog author="mgorse@suse.com" date="1560340800">- Update to version 1.16.0:
  + Highlights
  - GStreamer WebRTC stack gained support for data channels for
    peer-to-peer communication based on SCTP, BUNDLE support,
    as well as support for multiple TURN servers.
  - AV1 video codec support for Matroska and QuickTime/MP4
    containers and more configuration options and supported
    input formats for the AOMedia AV1 encoder
  - Support for Closed Captions and other Ancillary Data in video
  - Support for planar (non-interleaved) raw audio
  - GstVideoAggregator, compositor and OpenGL mixer elements are
    now in -base
  - New alternate fields interlace mode where each buffer carries
    a single field
  - WebM and Matroska ContentEncryption support in the Matroska
    demuxer
  - new WebKit WPE-based web browser source element
  - Video4Linux: HEVC encoding and decoding, JPEG encoding, and
    improved dmabuf import/export
  - Hardware-accelerated Nvidia video decoder gained support for
    VP8/VP9 decoding, whilst the encoder gained support for
    H.265/HEVC encoding.
  - Many improvements to the Intel Media SDK based
    hardware-accelerated video decoder and encoder plugin
    (msdk): dmabuf import/export for zero-copy integration with
    other components; VP9 decoding; 10-bit HEVC encoding; video
    post-processing (vpp) support including deinterlacing; and
    the video decoder now handles dynamic resolution changes.
  - The ASS/SSA subtitle overlay renderer can now handle multiple
    subtitles that overlap in time and will show them on screen
    simultaneously
  - The Meson build is now feature-complete (*) and it is now the
    recommended build system on all platforms. The Autotools
    build is scheduled to be removed in the next cycle.
  - The GStreamer Rust bindings and Rust plugins module are now
    officially part of upstream GStreamer.
  - The GStreamer Editing Services gained a gesdemux element
    that allows directly playing back serialized edit list with
    playbin or (uri)decodebin
  - Many performance improvements
- Switch to meson on Tumbleweed.
- Rebase gstreamer-rpm-prov.patch.
- Require libdw. Helps with generating backtraces.
- Place gdb autoload files in -devel package.
- Add gstreamer-pie.patch to generate position-independent
  executables. Previously done through CFLAGS/LDFLAGS, but this
  makes ninja pass -pie when linking libraries as well, causing
  the link to fail.
- Now requires glib2 &gt;= 2.40.0.</changelog>
  <changelog author="schwab@suse.de" date="1561982400">- Use libunwind only if available</changelog>
  <changelog author="dimstar@opensuse.org" date="1562760000">- Fix meson script using sed: since we rename gst-plugin-helper for
  multi arch purpose, we also need to fix meson.build to make the
  code look for the correct name (boo#1140998).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + GStreamer-vaapi: fix green frames and decoding artefacts in
    some cases.
  + OpenGL: fix wayland event source burning CPU in certain
    circumstances.
  + Memory leak fixes and memory footprint improvements.
  + Performance improvements.
  + Stability and security fixes.
  + Fix enum for GST_MESSAGE_DEVICE_CHANGED which is technically an
    API break, but this is only used internally in GStreamer and
    duplicated another message enum.
  + hls: Make crypto dependency optional when hls-crypto is auto.
  + player: fix switching back and forth between forward and
    reverse playback.
  + decklinkaudiosink: Drop late buffers.
  + openh264enc: Fix compilation with openh264 v2.0.
  + wasapisrc: fix segtotal value being always 2.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + Interlaced video scaling fixes
  + CineForm video support in AVI
  + audioresample: avoid glitches due to rounding errors after
    changing rate
  + Command line tool output printing improvements on Windows
  + various performance improvements, memory leak fixes and
    security fixes
  + VP9 decoding fixes
  + wasapi: bug fixes and stability improvements
  + tsdemux: improved handling of certain discontinuities
  + vaapi h265 decoder: wait for I-frame before trying to decode
  + tee: Make sure to actually deactivate pads that are released
  + bin: Drop need-context messages without source instead of
    crashing
  + gst: Don't pass miniobjects to GST_DEBUG_OBJECT() and similar
    macros
  + tracers: Don't leak temporary GstStructure</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - delay creation of threadpools
  - bin: Fix `deep-element-removed` log message
  - buffer: fix meta sequence number fallback on rpi
  - bufferlist: foreach: always remove as parent if buffer is changed
  - bus: Make setting/replacing/clearing the sync handler thread-safe
  - elementfactory: Fix missing features in case a feature moves to another filename
  - element: When removing a ghost pad also unset its target
  - meta: intern registered impl string
  - registry: Use a toolchain-specific registry file on Windows
  - systemclock: Invalid internal time calculation causes non-increasing clock time on Windows
  - value: don't write to `const char *`
  - value: Fix segfault comparing empty GValueArrays
  - Revert floating enforcing
  - aggregator: fix iteration direction in skip_buffers
  - sparsefile: fix possible crash when seeking
  - baseparse: cache fix
  - baseparse: fix memory leak when subclass skips whole input buffer
  - baseparse: Set the private duration before posting a duration-changed message
  - basetransform: allow not passthrough if generate_output is implemented
  - identity: Fix a minor leak using meta_str
  - queue: protect against lost wakeups for iterm_del condition
  - queue2: Avoid races when posting buffering messages
  - queue2: Fix missing/dropped buffering messages at startup
  - identity: Unblock condition variable on FLUSH_START
  - check: Use `g_thread_yield()` instead of `g_usleep(1)`
  - tests: use cpu_family for arch checks
  - gst-launch: Follow up to missing `s/g_print/gst_print/g`
  - gst-inspect: Add define guard for `g_log_writer_supports_color()`
  - gst-launch: go back down to `GST_STATE_NULL` in one step.
  - device-monitor: list hidden providers before listing devices
  - autotools build fixes for GNU make 4.3</changelog>
</package>
<package pkgid="161ba213d31f3eba8edc4c8097f76e2b1a5d671befd546757ef393fb45028cb1" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a792b764478d4afb9974a2b3b612ff87b28775dc71869e98328db74b878a121a" name="libgstriff-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="fb6de8aeeece96cb41ba297405334d41f0a4320fa04dea10644bb3ba58237700" name="libgstriff-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="83a2e5d38d0e2793bf7a917cfa97411f27407002ac0583f4077cf829f078f713" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="12340dd4a632166de66fe18cfd50ee2debc8d3ee7832d2f8a057737983f3f3ff" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="93ecb9032994e32bd32abf6d357fa0561bce3391ee53a88e447b91ecad2c4465" name="libgstriff-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d07c484d452b333ec891db6c9d52481db4408fba3bbab4b1ca631546ee3c7413" name="libgstriff-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="2ab5d8cc361928428c31ac68e0f2ffeab5107a7be90fd837e21faf83c66363b4" name="libgstrtp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a15661a2a372233dd7bfc9287c7ccc372d903e62d09ae2c282e48f4d7fef5a1b" name="libgstrtp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="d0fe0e83886772dd50d7065d3fe83b57e216e5b24271e2d80eef5ef58df0623c" name="libgstrtp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cd22485f576972151955a40abcc185944e5109997f4d031b053ce31cf7353fa7" name="libgstrtp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="62a20c350c8562c452a9d863d9bf532b0011bf1c46e34c005d7227d159e8a32c" name="libgstrtp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="69e0965857e7ba8ed4920b8a2caf3e1d4996a0a394263a92f6c7658685931b29" name="libgstrtp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="7af418f3ecf3fd62b844f8f13fe4ecaca3c22cbbca20064ab31c6ad5569bbfa7" name="libgstrtp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="b99a8d1f4b61eacab6794cfa27427f1235afef11b432e84ed767ecb05fb13dbd" name="libgstrtsp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="45c01f06adf4b18364e2876ff0839f21b67d40f68fd80818f162e1d267c5d8b0" name="libgstrtsp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0579a09e50ef985126241ee2c1ac674bbb1b5ecfc7fb32e1834dee349f9ba7a3" name="libgstrtsp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4aaa9cc456387047cdb00679970dc3030061a5c807fc2dc664b1f21395784740" name="libgstrtsp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0b370bc481efed3058c58cf3a09befe41c683f1f23e070965c17e365de77ff77" name="libgstrtsp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c0eab4c0f08174563fcd7ca2491de47989961dad3ffd1cfee5e6576f1e35f6c0" name="libgstrtsp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="9cfa41b3faf188917fc4e7e9ed8166c8daf04e9cfc6610c82eb6c1126a9dfdd0" name="libgstrtsp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="c5116ac3a68a9ba9160c6ac3be5ce7c522d18faa3f7a4f81b840d24f4adc719f" name="libgstsctp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0bbaf48187dd20e88e19b6bc0e37096fe77ad57ad4b4536e9b48b1426c48b1b5" name="libgstsctp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f5dc5d64ddeb40f1c363cd5cb04a32c1f4b67488f8d5cea3013cf1827028b7c6" name="libgstsctp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="420725e505b4e77cc97300d87a91ab0c5c92a0f7834d4dacfd6884b18d982df6" name="libgstsctp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="daa73450fc559a2c077a428210c087911f79eb015dcbfe93ba908b0c5a509399" name="libgstsctp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="1fa2b89ae40e48c60d6a0bdc3254bd919a251a7b770d832c9e27eafe615c13e2" name="libgstsctp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="18d7c4e701797b1c407d76ee59ea46e491a1e6e4729c1c1c490a38495bd33152" name="libgstsctp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="431c1b2739ed62d5a5725a852d5bbb678e0cbca4ad26beaea040122249c7a2fc" name="libgstsctp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="39bbc4d7ec668e4d8719fcba5aa0d07e291c6c587edf9e7d34687631406c8fb9" name="libgstsctp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="422aaa37c1cf6c25e3c1cf10edb3847721e28662dda0bf447f656830e56e1625" name="libgstsctp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="93cfa5673f113b0ba77da9eb81420dd5803841eb7ff8b0de3ee46d6fac990ed2" name="libgstsctp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="506389e60912a83b609d1b398cd2dc3ade0b9c7100fd731850d6a95c302cfd22" name="libgstsctp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="499904000ff30bde278824fb83b2a3946164562fb5bf5f603283a70228446db3" name="libgstsctp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="94b1487b855ce0f06f1438933a787378d3a807b11e8737853689f0ec662ae164" name="libgstsctp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="d6eaa20b0f284aab3543fa6dfb33de67ef6f5bf69790873748f5ea67a0b36bf6" name="libgstsdp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="cc9f8bce16c4e94212f846a8d23a665405778669b5b64f904e3114caf08b4831" name="libgstsdp-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ae20191a72769db253eb676b7a808d96daac340a213a9ed84fc8a43a66d1022c" name="libgstsdp-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="66b6c779438003d121c639faf97cfa088d0c99d98eeadb669b85e7e82ce5d2f0" name="libgstsdp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4a91f217cb35f4c65d042afe85c5f7b169240d9408db9be04884ca4a3d68b703" name="libgstsdp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="73d6b098f4fcaad44aa56c5f1252a80b5c0de6b284abd688d1f4fa00906383a3" name="libgstsdp-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="712be06633bfa5c1485310989f005213683dc1332b19ae1dda4ec331aca42892" name="libgstsdp-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a6d6f44c37ef41062564f8c5fe1ff978388224a362525e896754351be7313fbc" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="09d090c3829f2ffa3e8006e615cab237ad31e461859953b40e3fb3a5f55effa8" name="libgsttag-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0eeae242791faee80ee38d22073485dac2313ebb14e318b46772768e8c4179f5" name="libgsttag-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0d0c7ecdc76b93dfd3b5a2f900529c902ec344d845a5c8cc8338ae24349f8b67" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="df75ac9ae88748c35b08b4b8dcf245a8a03bf8461399fde33ba1d2fd0fc57e04" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0a81a45ebffc05dd7be25e1d71e91a6d7b6bdabc27d6edcbe55a261c7f47f4e6" name="libgsttag-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="a177e60c4e36f464d9baa33b69a774aa9cdf4e9320c22b88d6324228de063351" name="libgsttag-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f04ba46147f6eab2bc286f365a73d642f316392e8b3c1aaf879f42a9ce66fa79" name="libgsturidownloader-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="119fc9886c25adeca99bb67057ff1ded9ade44486fff848cc661ffbb19489b2b" name="libgsturidownloader-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="8ec70b2795249b9e02892187e6f58e457b5b998b6e5e0cbdbd837e57ae4dd57b" name="libgsturidownloader-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="1487881e088153dfe57b9643f8bfb16ddf5818450f931a2f6eb91bc0933c7056" name="libgsturidownloader-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="cf259dee4b08db6d34a8016e7b9e7bbe85ed4b2538107088b211962d779b4d63" name="libgsturidownloader-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7921c74b8fd4546de404667070a796c92a2ca9372087159e8ef36f98dcc602e2" name="libgsturidownloader-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5f64b572367fb726f2115623b275e9d7be1a6cc73aeefb7b600149498ae08d1f" name="libgsturidownloader-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d605ae548f3854f582b18d90fbfcc5052034b0f501bd7fdc9309ba24cd50378b" name="libgsturidownloader-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="a10da6f4771ef96e398a43f9df30c4d19f711a03ae639fdb0522a53f977605fc" name="libgsturidownloader-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="47772756a14189e683e0a27df66a479a68dd0201aef1adb54599f27726ff379f" name="libgsturidownloader-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b11faa19968b3d1f4a81d6ae044f36512f4dd39ada27040e9612d043cd920164" name="libgsturidownloader-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b5ddd53f5249ab8534d9c295a70b86da9b8ac6153b261f3fd749319a9ae390ba" name="libgsturidownloader-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="bcecb2f51e2046e7af05121168dbf5110cf373925f7f00a7f98f74a230927bbb" name="libgsturidownloader-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="9171cdf495a09ac6ecfa89aebe17c0802f6fa25db96b5ee7c052d911c21f0192" name="libgsturidownloader-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="4c4eb6bcfaffce3af19fb08e2e7fa77cdea6d7f25f90bfc26782ab634b36e5a7" name="libgsturidownloader-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="54f12a392b31251680b1f9fff5070b78419027feeceb72c7cfdd5748261a97d6" name="libgsturidownloader-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="17aff8a8652e3c7916202a3aecfab63629b5abeb4dbfc39e6e839df7c399ee9e" name="libgsturidownloader-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="615339933bd77de51e8636dfd7ce46ea9e1fd95591167ad39df0cef4554d59c5" name="libgsturidownloader-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b274649be7e6349e31f259fe2bd81f35ba7318a6fa7052bec7efac170e5cef87" name="libgsturidownloader-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="9e20101f3a20d2cc494ba7ffa5d44a48f1d87e0dd04ee80ff0ca9f02493b2c2b" name="libgsturidownloader-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="b9777c1459bdd22294ff71d04eb806416d4ff111669968d9af412df1513a2d4d" name="libgsturidownloader-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="5ba8cf286af6270d1d8795e74556524419ecb7d4866041d4f0229fc52276f8ad" name="libgstvdpau" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="22cb7870b1b042d2047ce82f7d0c15bdc1308b341d7db697f5848a62438b0049" name="libgstvdpau" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="cfae081f4db6d7563e502881c04074795c766d6847a54eafb353dbae3c2a1395" name="libgstvdpau" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="2d8325294c5944fa7fedf3ca2dce5b69feac6d4751390475f454eda62f932720" name="libgstvdpau" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ce1368a81acff81776f2b75926725ad23a989d359fa5593856f1f4683ec1ab50" name="libgstvdpau" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="ec64ef191b5f67077976ee96b7e743f972be377bfefbef40c40795c5c7333b7f" name="libgstvdpau-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="81543818e90ee3b04951a453cb388f1d6c260a8fe62086afdf058dab606134d9" name="libgstvdpau-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="355f25e29dc3e8a314229f57e70a4f93cfae239b8d3db4d9cae69748efbcb71f" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="0aa36bf7cfd710622d193485847b9b87898b07ec451cb12ca09673b75deb366a" name="libgstvideo-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="56912d001819cea25dba02cdf82468b30c5e5f60fc42957dc978d27e39816374" name="libgstvideo-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="f536528bd19aa00cafb4f124cdf71df58447fb4c990c914ca37946d9ad9ada3a" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="bce65a5eae421295e4d9ff6d5d2df9dc67523df14abd54fe976f8ba7985ef088" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="4eebaf11efd726ca39f5f5a883b3132e630492e9cec50246bb02276130b945d6" name="libgstvideo-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="83e2764a33634f8d98562b232c61ba870120b9e772918eb5770f28dcd8954bc1" name="libgstvideo-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gdk-pixbuf-2.0), pkgconfig(gtk+-3.0) and
  pkgconfig(gtk+-x11-3.0) BuildRequires and pass --disable-examples
  to configure (we already do in meson conditional): Only needed to
  build the examples.
- Add explicit pkgconfig(wayland-protocols) BuildRequires:
  Previously pulled in by gtk3 dependency.
- Add explicit conditional pkgconfig(cairo) BuildRequires for
  openSUSE versions older than current Tumbleweed, workaround bug
  in pangocairo dependencies in those releases. Also previously
  pulled in by gtk3 dependency.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + gst-plugins-base-doc-build-fix.patch.
  + gstreamer-plugins-base-arm-neon-configuration.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + xvimagepool: Update size, stride, and offset with allocated
    XvImage
  + video-converter: Fix RGB-XYZ-RGB conversion
  + audiorate: Update next_offset on rate change
  + audioringbuffer: Reset reorder flag before check
  + audio-buffer: Don't fail to map buffers with zero samples
  + videorate: Fix max-duplication-time handling
  + gl/gbm: ensure we call the resize callback before attempting to
    draw
  + video-converter: Various fixes for interlaced scaling
  + gstrtspconnection: messages_bytes not decreased
  + check: Don't use real audio devices for tests
  + riff: add CineForm mapping
  + glfilters: Don't use static variables for storing per-element
    state
  + glupload: Add VideoMetas and GLSyncMeta to the raw uploaded
    buffers
  + streamsynchronizer: avoid pad release race during logging.</changelog>
  <changelog author="fcrozat@suse.com" date="1576238400">- Enable orc / wayland-egl on SLE15.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578312000">- Add upstream bugfix patches:
  + gst-base-playbin-handle-error.patch: playbin: Handle error
    message with redirection indication.
  + gst-base-audioencoder-fix-leak.patch: audioencoder: fix segment
    event leak.
  + gst-base-fft-update-kiss-version.patch: fft: Update our kiss
    fft version.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580472000">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - audioaggregator: Check all downstream allowed caps structures if they support the upstream rate
  - audioaggregator: Fix negotiation with downstream if there is no peer yet
  - audioencoder: fix segment event leak
  - discoverer: Fix caps handling in `pad-added` signal handler
  - discoverer: Start discovering next URI from right thread
  - fft: Update our kiss fft version, fixes thread-safety and concurrency issues and misc other things
  - gl: numerous memory fixes (use-after-free, leaks, missing NULL-ify)
  - gl/display/egl: ensure debug category is initialized
  - gstglwindow_x11: fix resize
  - pbutils: Add latest H.264 level values
  - rtpbuffer: fix header extension length validation
  - video: Fix NV12_64Z32 number of component
  - video-format: RGB16/15 are not 16 bit per component but only 5.333 and 5
  - video: fix top/bottom field flags
  - videodecoder: don't copy interlace-mode from reference state
  - appsrc/appsink: Make setting/replacing callbacks thread-safe
  - compositor: Fix checkerboard filling for BGRx/RGBx and UYVY/YUY2/YVYU
  - decodebin3: only force streams-selected seqnum after a select-streams
  - glupload: Fix fallback from direct dmabuf to dmabuf upload method
  - glvideomixer: perform `_get_highest_precision()` on the GL thread
  - libvisual: use `gst_element_class_set_metadata()` when passing dynamic strings
  - oggstream: Workaround for broken PAR in VP8 BOS
  - subparse: accept WebVTT timestamps without an hour component
  - playbin: Handle error message with redirection indication
  - textrender: Fix AYUV output.
  - typefind: Consider MPEG-PS PSM to be a PES type
  - uridecodebin3: default to non-0 buffer-size and buffer-duration, otherwise it could potentially cause big memory allocations over time
  - videoaggregator: Don't configure NULL chroma-site/colorimetry
  - videorate/videoscale/audioresample: Ensure that the caps returned from...
  - build: Replace bashisms in configure for Wayland and GLES3
- Drop upstream fixed patches:
  gst-base-playbin-handle-error.patch
  gst-base-audioencoder-fix-leak.patch
  gst-base-fft-update-kiss-version.patch</changelog>
</package>
<package pkgid="ef06d251a83543a1312f3f6ac726b5d8ecd32bc369c73584671c06a3546fd01a" name="libgstwayland-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="104562a90541eab4b695f8307589505e82128708769f24b87a1d745133177a23" name="libgstwayland-1_0-0" arch="i586">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7a441e25328fbe354b8875c195305cb551039668dfcae84352d82b1a9493f415" name="libgstwayland-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="e8377040734701963a88047251704117381ac3a878fc50488d41a0b811fc3407" name="libgstwayland-1_0-0" arch="s390x">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="02d813820195de5177e6dc365f83ad037d7989283cde8d905e4303320cebb8ba" name="libgstwayland-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="d5dd4a48e1db49cdd53403b85a90b01a32e157d970eda405778c9922c5c82488" name="libgstwayland-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="e14a314871279a0a54cde936e0e5a01ec921049f297cf34986194300a7202f35" name="libgstwayland-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="f43473baa961b427bbc3659673af759f171a1131c861aa12c20e3c6ee4b1d383" name="libgstwayland-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="96b199202e7791e062ab1f4ca2fc8bbc053e135ac2d3033c7ceaca89e1c6ac59" name="libgstwayland-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="961e98bf799d468e21651483c244e6b493cd200a598008cc7b03a09b2e4039f8" name="libgstwayland-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="0c31128aaaa1f83aee15698c8dfd38318d9e363b4b3bb17ef450ffa6650b833c" name="libgstwayland-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="4952b8332ca2234a15acd0c60d6c58362d983947b4b1f94cfa90ae18f23e2edc" name="libgstwayland-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="f2d79f0c427f038d9165e57739f4ed7b8a72f4999afd06bf930c4d320ac9d3c2" name="libgstwayland-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="295f4062bac1c963a1883be1e38320720ae2e0004b707748a2d5ead37dd0127b" name="libgstwayland-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8226691dfb3da977456512b975d8c3e5527c10f44fd0bc4b38f892499d9669c1" name="libgstwayland-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8bc06bbdadda059540a353fe84f472d7753fc50b285b4d8f10545f7625200bfe" name="libgstwayland-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="45753d405cf1c4f9cb976de05a04dce56c13779aba267c5147d14a2a7de8817e" name="libgstwayland-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="d9e38f601103570e62e325b89fbf379c654e3fdb93f225a5009b9c27ac3864e9" name="libgstwayland-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="55578059e0a023d539ff2ba344ed4172add489d1a43daf24487408fbd282847b" name="libgstwayland-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.12.5" rel="3.6.1"/>
  <changelog author="zaitor@opensuse.org" date="1514548800">- Add gst-bad-player-transfer-ownership.patch: player: transfer
  ownership of info properties (bgo#791982).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519300800">- Move pkgconfig(mjpegtools) BuildRequires and resulting plugins to
  normal build, mjpegtools with all needed features are now
  available in openSUSE.
- No longer pass --disable-mpegpsmux and --disable-mpegtsmux to
  configure, and move the resulting plugins to normal build. This
  was originally done due to a possible license issue, however on
  closer inspection, the plugins in question clearly states that
  one can use any of the four licenses listed, so we elect to use
  LGPL-2.1+.
- Remove conditional for libgstwayland-1_0-0 subpackage, need due
  to it beeing in baselibs.conf, and lint bots declines this now.</changelog>
  <changelog author="bwiedemann@suse.com" date="1519819200">- Add gstreamer-plugins-bad-reproducible.patch to avoid variations
  in gtk-doc output (boo#1048207).
- Following the above, add automake and libtool BuildRequires and
  pass autoreconf, as the above patch touches the buildsystem.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819201">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519819202">- Split out fluidsynth plugin in new sub-package
  gstreamer-plugins-bad-fluidsynth.
- Following the above, add gstreamer-plugins-bad-fluidsynth and
  already built sub-package gstreamer-plugins-bad-chromaprint to
  baselibs.conf, build 32-bits support for these too.
- Add conditional gstreamer-plugins-bad-fluidsynth and
  gstreamer-plugins-bad-chromaprint Requires: to -devel
  sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519992000">- Add gst-bad-revert-automake-autoconf-versions.patch: Revert the
  autoconf and automake version bump upstream did without
  consideration about us, allow to build with the automake we have
  Leap 42.3 and SLE12.
- Following the above patch, drop the explicit automake
  BuildRequires, as libtool BuildRequires brings it in, and we can
  now build with the old version we have in Leap/SLE.</changelog>
  <changelog author="fcrozat@suse.com" date="1521806400">- Move BuildRequires pkgconfig(dvdnav/dvdread) to BUILD_ORIG
  section. It is only needed when building BUILD_ORIG package,
  which is not the case for official builds for openSUSE Leap,
  Tumbleweed or SLE.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1522324800">- Update to version 1.12.5:
  + Bugs fixed: bgo#794069, bgo#794353, bgo#794620, bgo#794537,
    bgo#793629, bgo#789476, bgo#789476, bgo#791910, bgo#791813,
    bgo#791772, bgo#791330, bgo#791982.
- Drop gst-bad-vtdec-destroy-create-fix.patch and
  gst-bad-player-transfer-ownership.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1545739200">- Add gst-bad-fdkaac2-fix.patch: fdkaac: Fixes for compatibility
  with libfdk-aac 2.0.0 (boo#1120299).</changelog>
  <changelog author="zcjia@suse.com" date="1620907200">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
</package>
<package pkgid="7ca1e7a835b191c9ffd1a128c462b5ec034201020a42ff1bc4df916fa4e703c7" name="libgstwayland-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5af73642be6ce533b44bc610ba7533f8b5cbf5f33bba3c0fb4cc530cb15f8904" name="libgstwayland-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="bbbcc430ffa0b42e48fd7fa9cf1f8f01434bca28f38c907305d48b70eff96bc0" name="libgstwebrtc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="6f0a80860db3517192445848d777030f1a3ebd75024328a542c681bfa810d68b" name="libgstwebrtc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="82403320ec179874507d096c1f43715769f72705ea134339f48389b2e411b59f" name="libgstwebrtc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="64e5b1ac1829c0f542fbdb1906ab37654d700afb7c65941165720c34bc1fc798" name="libgstwebrtc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="29b25949619f2a35c5ed6ad324cbbcd322c4df67ee1e73daf8d2367ccd4e26b5" name="libgstwebrtc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="fd53f996dab8bb265699f250e00fbb61203e6934972f9b8b4012f64e29bd8a6a" name="libgstwebrtc-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="b144db4eb8297c6d08c4471792245b73c4b698f601aff8e4ff0148d42927be87" name="libgstwebrtc-1_0-0" arch="i586">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="2814a73a99f2989b5b49d1cf6f9da6cf578d68d4659e48a487beac00f14e8dcd" name="libgstwebrtc-1_0-0" arch="ppc64le">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="f18eb26de1ae1293bf4a2129dad11a47e240b6c633513b3f693fb7a42cf064bf" name="libgstwebrtc-1_0-0" arch="s390x">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="dc1745b24cce1ddadcde73f5fb0da51a0c20b6a10ae4d1f4e3c784ff655e7035" name="libgstwebrtc-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="0196ceb7706c7a648a6dafb6fe0b4cdf096a17101943b435a17fad76121850e3" name="libgstwebrtc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="705e9b0ac7fbb879f764507765889608da0a7c3e9a9a62a4a80efefa3862ce67" name="libgstwebrtc-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="ad88a205d35a17f7f55e69d86e5e702181534cd464e8ed066cfd08c97071c26b" name="libgstwebrtc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="4.4.1"/>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1620993600">- Add gstreamer-h264parser-fix-overflow.patch:
  h264parser: guard against ref_pic_markings overflow
  (bsc#1181255 CVE-2021-3185)</changelog>
  <changelog author="zcjia@suse.com" date="1621425600">- Update to version 1.16.3 (bsc#1181255):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31
- Drop upstream fixed patch: gstreamer-h264parser-fix-overflow.patch</changelog>
</package>
<package pkgid="5602a69f976d66e6e26dd7d5c46bc8f384c6a4a7eb2f36a83c354426458783ba" name="libgstwebrtc-1_0-0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.16.3" rel="9.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1566216000">- Drop pkgconfig(gtk+-3.0) and pkgconfig(gtk+-x11-3.0)
  BuildRequires and stop passing --with-gtk=3.0 to configure, only
  used for building examples, and we are already passing
  - -disable-examples to configure.
- Drop gst-bad-revert-automake-autoconf-versions.patch: No longer
  needed for any supported version of openSUSE. Note, leaving
  libtool BuildRequires in place as fix-Werror=return-type.patch
  needs it still.</changelog>
  <changelog author="mvetter@suse.com" date="1566820800">- bsc#1144244: Remove dependency on jasper
  Jasper support was removed in 2013. OpenJPEG is used for JPEG2000.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Use openssl for HLS crypto. openssl is required by DTLS, and hls
  can use any of openssl, gcrypt or gnutls/nettle (since 1.5.1).
  Drop explicit pkgconfig(nettle) BuildRequires and pass
  hls-crypto=openssl to configure/meson.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1569326400">- Update to version 1.16.1:
  + See main gstreamer package for changelog.
- Drop upstream fixed patches:
  + fix-Werror=return-type.patch.
  + gst-bad-Fix-compilation-with-openh264-v2.0.patch.
  + gst-plugins-bad-do-not-retry-downloads-during-shutdown.patch.
- Following the above, drop libtool BuildRequires and autoreconf
  call, no longer needed.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1570708800">- Fix compilation with OpenEXR 2.4.0
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  + Readd libtool and autoreconf call
- Remove Leap 42.x support from spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575460800">- Update to version 1.16.2:
  + wasapi:
  - Various fixes and a workaround for a specific driver bug
  - Move to CoInitializeEx for COM initialization
  - Fix runtime/build warnings
  + waylandsink: Commit the parent after creating subsurface
  + msdkdec: fix surface leak in msdkdec_handle_frame
  + tsmux: Fix copying of buffer region
  + tsdemux:
  - Handle continuity mismatch in more cases
  - Always issue a DTS even when it's equal to PTS
  + openexr: Fix build with OpenEXR 2.4 (and also OpenEXR 2.2 on
    Ubuntu 18.04)
  + ccextractor: Always forward all sticky events to the caption
    pad
  + pnmdec: Return early on ::finish() if we have no actual data to
    parse
  + ass: avoid infinite unref loop with bad data
  + fluidsynth: add sf3 to soundfont search path
- Drop libtool and automake/conf BuildRequires and autoreconf calls
  + 0001-Require-OpenEXR-2.3.0-at-least-and-do-not-force-C-98.patch
  Fixed upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1576152000">- Add a BuildRequires for pkgconfig(pangocairo) since it's needed
  by the ttmlsubs and closedcaption extensions. This is not currently
  a problem in openSUSE because the dependency is pulled in by other
  packages which are not installed in SLE.</changelog>
  <changelog author="mgorse@suse.com" date="1586347200">- Enable chromaprint plugin on SLE (jsc#SLE-11723).</changelog>
  <changelog author="federico@suse.com" date="1612612800">- Disable the kate/libtiger plugin.  Kate streams for karaoke are not
  used anymore, and the source tarball for libtiger is no longer
  available upstream. (jsc#SLE-13843)</changelog>
  <changelog author="zcjia@suse.com" date="1623067200">- Update to version 1.16.3 (bsc#1181255 CVE-2021-3185):
  - amcvideodec: fix sync meta copying not taking a reference
  - audiobuffersplit: Perform discont tracking on running time
  - audiobuffersplit: Specify in the template caps that only interleaved audio is supported
  - audiobuffersplit: Unset DISCONT flag if not discontinuous
  - autoconvert: Fix lock-less exchange or free condition
  - autoconvert: fix compiler warnings with g_atomic on recent GLib versions
  - avfvideosrc: element requests camera permissions even with capture-screen property is true
  - codecparsers: h264parser: guard against ref_pic_markings overflow
  - dtlsconnection: Avoid segmentation fault when no srtp capabilities are negotiated
  - dtls/connection: fix EOF handling with openssl 1.1.1e
  - fdkaacdec: add support for mpegversion=2
  - hls: Check nettle version to ensure AES128 support
  - ipcpipeline: Rework compiler checks
  - interlace: Increment phase_index before checking if we're at the end of the phase
  - lv2: Make it build with -fno-common
  - h264parser: Do not allocate too large size of memory for registered user data SEI
  - ladspa: fix unbounded integer properties
  - modplug: avoid division by zero
  - msdkdec: Fix GstMsdkContext leak
  - msdkenc: fix leaks on windows
  - musepackdec: Don't fail all queries if no sample rate is known yet
  - openslessink: Allow openslessink to handle 48kHz streams.
  - opencv: allow compilation against 4.2.x
  - proxysink: event_function needs to handle the event when it is disconnecetd from proxysrc
  - vulkan: Drop use of VK_RESULT_BEGIN_RANGE
  - wasapi: added missing lock release in case of error in gst_wasapi_xxx_reset
  - wasapi: Fix possible deadlock while downwards state change
  - waylandsink: Clear window when pipeline is stopped
  - webrtc: Support non-trickle ICE candidates in the SDP
  - webrtc: Unmap all non-binary buffers received via the datachannel
  - meson: build with neon 0.31</changelog>
</package>
<package pkgid="8425ca5cd80089d3e18007d84c6dbceb14cba14c817c3a57c4f096968442bf48" name="libhivex0" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="5766a6c668e05f45387b53ccabe342607abbcfa9405546634cccb74e2e7dfb2a" name="libhivex0" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ef65bdd2df8181c35a131ecea784bfe7fee5b47ede9df6309896d30dac8382b7" name="libhivex0" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="b52667f89b085802fe6eea03aaddbc9e58843255ecdd43e95e4b304b95d5d804" name="libhivex0" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6d2719adf4cbe3b6ad7371bf2480ed74bc9d7efaa77d03f33811de0a11313a13" name="libhivex0" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="8f007e57dd604d7fed7ada8f94c46c759f0ee96f4c1b2407799767c904246159" name="libhowl0" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="1c0882cf8ec5c17d93d5134d00e0c4e96ba4248078e43c7410dcc6c6b679767c" name="libhowl0" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2a094aaaa4e7ac72d5cabc2e98a6ea7e0d7da8fd6e1bef8f9781073979f36c5b" name="libhowl0" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="fdd49f7296df9d6aa27302f7a818a828b557f2a48ba1397979ae0c2a882f3328" name="libhowl0" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="2a7391244bf7262790dd4269fc16f6721935b247f6b1cab634911940641ce363" name="libhowl0" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="a2086957adb94ceb0d0fec0ef9d88dd7e0f680d1c3cdacfb975bec8f23ab3072" name="libirs-devel" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3918fefcc66e065633646dd67bdc2c633b76d1c3036fd8a653e6710a8002623b" name="libirs-devel" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4acb99eb9a403e52c1f75e9645fb507e91fcbcbaddca4ce4358d317215cc5f1b" name="libirs-devel" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="fb9b74d7ee6451e51ab8ce4e41defc21db07bdede0e67a6e0967b7f3928f07e2" name="libirs-devel" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4bcae08bed249cb03931e99d74cbca77fe71e1e3a9ec024d4b385f6a0e57240b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="a62291a780f1acd0f8c066f0dfeb1c8dc0845c613fc3b9912eb15d0b4e9c2ff5" name="libirs1601" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="33a5982291e25c74d8971d2cc9571acf64ddf8245d519ea7d771a9c4747c5501" name="libirs1601" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3d4b4063a035774b1b02b7d0908fe0cef5d8302815ed7c7a912bc3c26613a6dc" name="libirs1601" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="7044b92c3214d0d894c3ba91a5325c47437acf113d456af57d03e5570ec69f8e" name="libirs1601" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="50077793b668617696ba48e48f8bee235ed8a59767233573cba27c3d23c4c3fc" name="libirs1601" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="f199419d75074194464381052ac60b6a53a6702527fa90549de93ebf79cfb48c" name="libisc1606" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="5335f752d34d282f06198d4680925b4538bf31204b0c2716d5de41e846f6cba5" name="libisc1606" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="c30a58fb8957039c5122ae575f1b8f543c4660003511dae22a1c465e56472744" name="libisc1606" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="ca51dca7ddbe1b1be8299edabc4d35dad36cfd2735beacb86d50122e75495687" name="libisc1606" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="98dd928a177c2e33de896710cc75c1a2a5a1c25a572bd2b6f18657d5e9566f03" name="libisc1606" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="7fcb302d80665551c4c018b1d527dc43038f8af126df901a406ee694df55393b" name="libisccc1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="977123bb9b38b85964b5ae57d7d81ddcd8bd5079116909742a07079ebca7c660" name="libisccc1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d094e22a8414843b5fc2f52a08fe276310d8d2a81a49bdc5d20f3c1c3e446b76" name="libisccc1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="b97b6f6231dd07f6060e9c4cb7953136ebea0c9ff8410a5594914d85951f528a" name="libisccc1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="3c3327c796a4cbdb149fa561c25f096b4305f003ec2edf8db16fa4052d45c17a" name="libisccc1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="764871762af1413fda061533e0388bd1b3ba4f69b436a4929aa416fad3e33670" name="libisccfg1600" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="132975319e95ad3ca376f7ef16b6ac1ef1701bf8eaa675bd40ffbe187d2c93a5" name="libisccfg1600" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="e827e27732f34c21b47cd5d3e00e404aea1ea102f2fe2529c3db98cad8683efa" name="libisccfg1600" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="2279227b222541207a80e352c0a857831ce52eb5e416566156f4005df9507ae4" name="libisccfg1600" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="25e8e45d66bad6f6fb4a9233cc6f84d0cbbf088f361dec4282d075f6663cdb9b" name="libisccfg1600" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="cbda08c78201e9a50f9bdcfc183319aff6d233d075cabce941d52bc12011816b" name="libitm1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ca5087e91f55215030bc0f474cdcc679b7d249cc372252018676fbfee7aad037" name="libitm1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4f4012bb87945ffc7b42ccf4ea1b8a85f7d56ac79ae6a5bce00b6423f906e6bd" name="libitm1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3058946490c5673bf78636fe43d5d57426f7794d347a89ee66a7f39e764a1750" name="libitm1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="52e2716c14fd3204d0b1786c25443a60d579f309f8bb60c0e4bf38d39713408e" name="libitm1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bb243fdaa76bb725d78e89d41e23d66b3f7d557238dc0ad6cda8fd45a5dcfdc5" name="libitm1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cb2da7c97ed4189825b560cdcbd62fbf246ec88c3bb0b252890f3a8b2c570406" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7543da3b2456f82f0d707b90aa1a9d7dc90362c382b43b090e84101946576a77" name="libjavascriptcoregtk-4_0-18" arch="aarch64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="35bed224043d12c595c512a7827837cfa787d96562bea1a117df75288ba6d173" name="libjavascriptcoregtk-4_0-18" arch="i586">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="e607a4e72f92c407a2565eb79c26076a0de60fb1ce014da39d149c848535d891" name="libjavascriptcoregtk-4_0-18" arch="ppc64le">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="0e3115853521acb8be14e22613db6d982fd4ddd38ff10c828c42d37f346351a4" name="libjavascriptcoregtk-4_0-18" arch="s390x">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="0d97dd7fae3b6105d3d8cf4ed39563373a6ff1246a6472b3ddc05909eaec74c9" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="5a9f6193dec018a5b2a87e81055135cd66cf5c5eee6b1ff1a24518bb776f42b1" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="d1a03258c15cba2c7a3bba9d82e04c07eb0863f19e3aa9a5f1067e31a7570848" name="libjavascriptcoregtk-4_0-18-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="4906fceb583e1d49e0e4a81c025086f5942f5d528252f0d5ade26494278bb0dc" name="libjpeg-turbo" arch="aarch64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1f772d522720250ddd5bd7e3d509e0a27a1ea1ffd37d8b906032d1a44af146b8" name="libjpeg-turbo" arch="i586">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="ca69cc6532641b4f6b997bd6b6cebe5abe080949c68e2ca5b30d60a676ebc185" name="libjpeg-turbo" arch="ppc64le">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="24092d45253eb97de05d5fb477538d5d36588e0e09e4e7d94cb0d0bbb081c88a" name="libjpeg-turbo" arch="s390x">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="4e567abc630eca3ced390333e1e635b82d03fa9cc57b9d3768eb3960817b7ad4" name="libjpeg-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="cf07771f729cb14877617520f72aaa59ba4b90245016b110e8eb9fd5748ef0bf" name="libjpeg-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="e07695c53cb3dc2c76e90c72fe1a10139ab4a4e06548970f0854d0fa4e6ca5ea" name="libjpeg62-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9c1883e752891c12a80ad8d184cf5eca224f4e1b98c056aa5a815a8a7b9e146e" name="libjpeg62" arch="aarch64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="2c8b9f00b91cefd82a2fc6d4f38bbbf0dfb877799416c6b8d128706f7ee72925" name="libjpeg62" arch="i586">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="ae2d089c385252e50b22dc5def92687172916c3ae0f1edeb8340b19969f77324" name="libjpeg62" arch="ppc64le">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="fccb93c51877fb5da7e78f8ed63ac47f0fefa64ee63a0cf2a002c5934f65a2bf" name="libjpeg62" arch="s390x">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9cc15ec927025e8f4cc63b8383b4ee1afd0f1ff515556e30c78e3534f6dd1aa4" name="libjpeg62" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="405f18d178845df444cc5f0759e33947416d432beec7a1adb3a0e5a7ece6a970" name="libjpeg62-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="57bec595f1d5f174f73616a89df9d18d19291a907de656394875e00a71fc9e0c" name="libjpeg62-devel-32bit" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="b9233e3f315e3d8919c966d664111327871a2da5908baa5dc81b24db27f4004d" name="libjpeg62-devel" arch="aarch64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="b8755677a2471e35d2f999bab43fed3b97cfd9ae54425238784f43acb6d7751a" name="libjpeg62-devel" arch="i586">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="08101e7f682a02d6c04bb9fc45982a25935b1410d6fe12ffdf9bafaf1f93f1fb" name="libjpeg62-devel" arch="ppc64le">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9c0afd9dbad65ac5fbdf91c318b9bb9512e5b910065e5c0671f230e44d970dc7" name="libjpeg62-devel" arch="s390x">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="efdcb67612ddd0144c99ad491848fff5c2aa05d0fd30159901f68e78705b4836" name="libjpeg62-devel" arch="x86_64">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="8e5398c45081252d1c47d9098eeceb2ceb4923ef7cb417f47f42d670c475424c" name="libjpeg62-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="62.2.0" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="47d33c1074bdcd17a6780666756b57cf4d83e13cd21043b7ff17c8b0d3aa13e6" name="libjpeg62-turbo" arch="aarch64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1374c33b15081d459c9dd4fa57ee681f656523e54339e4c0a7bcd43f7fe0f083" name="libjpeg62-turbo" arch="i586">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="bdfc66348b91663ea5e986ca0e60aa3485574a5b2105bf9e69fd5e7e0e58d416" name="libjpeg62-turbo" arch="ppc64le">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="959694507dc4a2d4dadc906fb74b1741c5d0b31814cbe6fe9a1e0bc27e3a7dfa" name="libjpeg62-turbo" arch="s390x">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1c457c468eb6a39890721ca6c6884da0931d8bcd4079fa0990fc49eb64ecc0ec" name="libjpeg62-turbo" arch="src">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="938d7b0490dab71fd9c69e36e3a57327991f83734d8f76d5ec3c9d30ed1de725" name="libjpeg62-turbo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="5.18.1"/>
  <changelog author="bwiedemann@suse.com" date="1484740800">- set build date to enable reproducible builds</changelog>
  <changelog author="jbohac@suse.com" date="1497528000">- mention the included utilities (djpeg, jpegtran, rdjpgcom,
  tjbench, and wrjpgcom) in the package description.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809600">- Update to version 1.5.2
  + Fixed several memory leaks in the TurboJPEG API library that
    could occur if the library was built with certain compilers
    and optimization levels.
  + The libjpeg-turbo memory manager will now honor the
    max_memory_to_use structure member in jpeg_memory_mgr,
    which can be set to the maximum amount of memory (in bytes)
    that libjpeg-turbo should use during decompression or
    multi-pass (including progressive) compression. This limit
    can also be set using the JPEGMEM environment variable or
    using the -maxmemory switch in cjpeg/djpeg/jpegtran.
  + TJBench will now run each benchmark for 1 second prior to
    starting the timer, in order to improve the consistency of
    the results. Furthermore, the -warmup option is now used to
    specify the amount of warmup time rather than the number of
    warmup iterations.
  + Fixed an error (short jump is out of range) that occurred
    when assembling the 32-bit x86 SIMD extensions with NASM
    versions prior to 2.04.
  + Fixed a regression introduced by 1.5 beta1[11] that prevented
    the Java version of TJBench from outputting any reference images
    (the -nowrite switch was accidentally enabled by default.)
    libjpeg-turbo should now build and run with full AltiVec SIMD
    acceleration on PowerPC-based AmigaOS 4 and OpenBSD systems.</changelog>
  <changelog author="pgajdos@suse.com" date="1507809601">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3b4f0b876fc193a7e0073b3b9490513b4c3959a9c926e8aa29718d7e26fa5ab0" name="libjpeg8-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="e24df780275160d97666191608ef29e788bb9e6c47cec9e3434759366aba0c22" name="libjpeg8-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="f2ca3676a03073d17fd5843233dc9da6892dd84adb287818247d2edef9a6b532" name="libjpeg8" arch="aarch64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="a7f48a3a49bbec5c83b3a2abad7cf0aa1b2869ee0064f4d38acaf3ccd805b2c5" name="libjpeg8" arch="i586">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3449992a886a35c051ce9ba101f007c5cd0c581c28053a990a29240fc5500f40" name="libjpeg8" arch="ppc64le">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="4b644e71dd58539c740b9234db20d06e865588f3d461872794fb72d2d865b8cf" name="libjpeg8" arch="s390x">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="977fd8a6b396a049e8746279e65aafa74c94073c4cd5f4edc28a2134cdc8f85e" name="libjpeg8" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1ac3bde788a413308c1a37cf6f2a06423271ff95d066f733332c0c00e70c7e3c" name="libjpeg8-devel-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="c2b805da2c5b65a59f955b4ea38efa2ae3f49d6d4df206b96b2bf984127ec95d" name="libjpeg8-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="74dca5a8d7ae7e55f3fbd632bd0c32f9a3ed2b57aaac7dfa06d1d10a152ff53d" name="libjpeg8-devel" arch="aarch64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3a7fe5131adc8f78a3849a78341a00aa5bd7d829d028a4e52dd02a78206399db" name="libjpeg8-devel" arch="i586">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="353df2eccf4a8127679730afa23b428fd7cea1c65fd509f140aa95bd58736955" name="libjpeg8-devel" arch="ppc64le">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="72ef314cbfe284844ae790583c43d8fdeae225a7fe1788213cfaba86b94b994f" name="libjpeg8-devel" arch="s390x">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="0a7c9d6e19f107f296413f5e17bc20fa204a9c7c82525f4ae8cf3d34eed520e1" name="libjpeg8-devel" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="d678b635fba3350b9c4d3f84fc091376ff965174699635c98cb4941f39041013" name="liblsan0" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6a1f7aa4af742587f70d967a1a9fc01936553824347b979380c515a2a0bd36f1" name="liblsan0" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="8852dc405790a1b384d8cb699aa6c8da403cbbbab2fb9ee42ba698ee5ca90c89" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1af6b835e56aba7b46b580d1eab99397f6f2a61e58b7cb1d7fd6f8f2a6d0c55a" name="liblz4-1" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="23ca3477e673d4776d8e3a514401c1bccd0ff940818c3114fdb8bd41aad5d942" name="liblz4-1" arch="i586">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="becf480eb6993e0125264e0f10b5b32c56240c4b6bf169516718b9155a9ffbed" name="liblz4-1" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="fa14768d5abfe042fe8209088ff1c036ef4af4652437e806c774f0a602736820" name="liblz4-1" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="d5389166ff2a682f3e7597a93b1da2a7a3bac405293ee1a92747c1946a783f96" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="13b2825466f87d8427efc02a5e1ffffba475776bdac625c0d3084f5f0f124c22" name="liblz4-1" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0dd0017c4f106e2c79f0d1d3e5aca1b59bbb1347d0d5c223b5902057f9489a9a" name="liblz4-1" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="6f4b14d80590d5004767cfd2620e01717b24c279b75020fde699d9754e57ce15" name="liblz4-1" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="8d0c47e9a5de6d902331149181fb436ed7faa8d2c3c7f1419ddeef0a61d47f14" name="liblz4-1" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="4eb891b5e57fe711b6f97e9279ca5dabb035ac721473f147a5cc55116ce4eea8" name="liblz4-1" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="800c52775360cb1a7c056951ddd732082677cf560bb5202fad80498e65a0ab01" name="liblz4-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="03c63b5701ba81b94ab8beb226abf40baeb37f3aa902b829e9ea86e25efce13f" name="liblz4-1-32bit" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="fd654907aed70358d2ec0ed7ecc041d0e2c4d81152158ce68b063d216f8571ec" name="liblz4-1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="94bafcf1beb7f3ff489bea78acdf9f6de0522c9f1126c3a9def500facb634e0b" name="liblz4-1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0e642bcb4c0b20ee71dc124f194d04cfc6039af864bfcc8b437c724f47bd7733" name="liblz4-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="51f994b9ce05bc4970525d84fefcb8f8f51d9d7f56775afffebc6cbf610f445a" name="liblz4-devel" arch="i586">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="d676d2f40fb881e77f6ba59b9d2272b976cc433b3ea5bff6d42c39c0bc6d1b04" name="liblz4-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="6aa315174f32a56904deed928e6e807a61fbb2e0e9c535f68c165c59b7332df8" name="liblz4-devel" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="378c58a87133f9c9e875d4b19535868797ebf4a49c0954a8d5dc9602d0f8374c" name="liblz4-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="fc7a24ff252e7c6f71d2ded9344039901bffc8dcb58ccd93d3bfd9a2714d59f7" name="liblz4-devel" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="e7a3698be45d517e831dba1a0dae45b6b81826f608d22b13ddf2146bc4a5e539" name="liblz4-devel" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="59af788cb1bad9600cd5f9dbde0de17df038de798458b2508def2b42886d8cb7" name="liblz4-devel" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="0c78926f84a15820d38b0a24da510cd50ecb5113ec9fb618db41a09bc29bea52" name="liblz4-devel" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="2b231c2e3ccb66d80ae3072dd83c8a52e9a2605d06b3abdccc5824b1a8b6b5a9" name="liblz4-devel" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="43c4bf0d174b0e45112414f226c05021ba01e93ce8ca631024ae52159f2126c6" name="libmodplug-devel" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="f674a7caeae8214210684edede23c0bd30761d8843e3d5b4bcbad8d92a357c43" name="libmodplug-devel" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="5fbc3022b9656b5b6c8d423a07e2f6afeb8ec148ffdfc25d860cf8c6ce2e82cf" name="libmodplug-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="87ed47fbd81f1c23c2e9abac3a7012cdec01d6ff091c82b1d060b76a8bf2faf0" name="libmodplug-devel" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="402a3ecdde30a1551cbc340f872a446fdccfc52229af241889f52587b82e1aeb" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="dc42c61deb4ff7709b6103beacaeb7b64c072081861c004f00f95b43be79514d" name="libmodplug1" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="a52d836323483cd75906d913626fbaa31bdbac78ded81894b1feb4901201084d" name="libmodplug1" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="91fb021dd2791e7ce2cc265ab58606b2d9c8ecc261fa2ef82c86f7a30d702dba" name="libmodplug1" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="d4306b1ede094d4064e5484d1373f1e398a3f823d66c92d3f5bcdff0e15f4506" name="libmodplug1" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="dd7300057e991ae3a68f2bd60936f41a6e0adf107b6c6533ee8ca68a195a0003" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="d151f96d2d5138b6d44045bb53a360adcc5871dd5e89ee94e6d4a724f491f9d2" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="8cb5c5fa7fc646a6a46c2f26cd5547e2bbfb85c0c177dba9644fdb50415295e3" name="libmodplug1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="813cea01550bc2d64c8e460411fb6ae6636fa207a29703cf683c4ae7323a444f" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="5669af287872ab4c65e72a82ad4ddbd97b6bba709143599638fa428db3eff93e" name="libnghttp2-14" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="b07e5736daa4eedf212cf55ec7c716ad699088d57bc59f48e1618c4b060dc2cc" name="libnghttp2-14" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="ec741818419c75d1ae6a7b7dc0a1e48ae58769d441f651c9c6b33ec7e54b4c9b" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="a763c3ad6b01b86ce376a13a50c6844653e0d0ddb3643a21e38b9d377a76b415" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="90c0e4637d814289199944782636a13242b5c593e1506400c0523e41af77decc" name="libnghttp2-14-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="705a663b18588e63b78f93b9c5a0be4ab6418c70f30b70da16204c293e880bfc" name="libnghttp2-14-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="ed8ac3f2476bc09e33655698dce6298b6543dae981ad086a6e6d4ea4a9138f70" name="libnghttp2-devel" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="cccd74a0f6ce60e00d2f0c898e055424505f5ca246ceed7988ec8ab58a1513b2" name="libnghttp2-devel" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="f0ddb1dd795c6b52291bbb2d5ac24a0a71169c5e428cb5a4c0a289f0b953c1f5" name="libnghttp2-devel" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="3b6e2ddf34f9cd2c3eb20b61844693172366473c86f72bca5a17142edeb01db4" name="libnghttp2-devel" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="cbbc9ffc9cb4fdbd82f75092af0998fb6351a1f8f266e62ddb1a07d27e52e73c" name="libnghttp2-devel" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="9771f104de01f90a4b389f4c778505e2458dc7ae943501894fe5cae0e37ae9a8" name="libnghttp2_asio-devel" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="1a9067425cecc613c20132d6fbb6a0fb6a84153817a4f36be6685386dcd302bc" name="libnghttp2_asio-devel" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="594cdc338f54584b8d42df24af18997eb0b671e167565617904145197eea2e51" name="libnghttp2_asio-devel" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="cad58659b3f2f533681ad7d1e6f39216ef76541e4232518a5f3465e0924db941" name="libnghttp2_asio-devel" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="aa8018601c84342e38b1f60ddaca1433cbd979a176fe9ad2fcad2e648744ac3e" name="libnghttp2_asio-devel" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2334a7d6aaaf434c08157fc93b70eb70be65be54008c2895c52122993121bf6c" name="libnghttp2_asio1" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="236d04da22fcb623e6ee887d199c02024ac66bb3379775688f09570b5e4a5026" name="libnghttp2_asio1" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="fc14573f1c10f266de58983472036ebb594a35c44db5f013f15afa79c06d57e2" name="libnghttp2_asio1" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="498bb796cc70337157ee307dcc84014632fdb6da68cd4549a3dfa85064085f69" name="libnghttp2_asio1" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="58c46cb394a1e1186aba990a619495380c87f89c2cbcfa9e64e06cde22816300" name="libnghttp2_asio1" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="7bcb7eea67991dbfacddc7ede0b7e2f216f3add2bea99122eebe089cb0cb0f1d" name="libnghttp2_asio1-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="97ad9ab5fae8619d1005c3ccd7c6c0cfaa05fa2a0a82f721a658603a2a7d753b" name="libnghttp2_asio1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2d73681615b4eaa0676ce0fabcec2c9d300e1b410aa7f14168a18fe90cf95e82" name="libns1604" arch="aarch64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="9946ac44280df5b3dbaa3bc861b0942d833cdf27705428a6692c45708251c939" name="libns1604" arch="i586">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="080220206a918eadd41820e5b741cf501cf4cd5792dec81cad8755de89e5b433" name="libns1604" arch="ppc64le">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="4f2db141980e84fef3feae8af3faf8e3a8033c6fed3f9af53ccb9264b160c01c" name="libns1604" arch="s390x">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="1f083172c6e786e9f8505aa20ee0f6afbc02b32389623173ce2e03c2faf0e702" name="libns1604" arch="x86_64">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="d5dd7d1571957a089a0d0aec679dcd57b959a6960c6bf224293add2169022d8f" name="libnss_slurm2" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72ea5f8306a4c4be0300f918f0e687b2435f4e0edc135d93fdb746d756fd86ff" name="libnss_slurm2" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1a000e127f66b6718eb247184b73990575aa154aee42e953967238ae6c0f21f8" name="libnss_slurm2" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f5daff080d5a16edf78c526d5aa836ee8512b762da8d4d6fac557f7f7825694f" name="libnss_slurm2" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6c770fe8ced1e9eb7a472e8a4413bbed60b02648acc2776f66fecc0e5159e0b4" name="libnss_slurm2_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e000ebc1701be74016902c47a6b447fd116ef4c4a95a8f877ba4b0a51c2d97fe" name="libnss_slurm2_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="422edfe9558f8a63dd4a1e33255e79f67ad006b3fbd0a670007c8abedcf5b464" name="libnss_slurm2_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="872e978b6c22bb815e0fc8f6c7e502b95bd60b0bfca22e0e00a029716b8358df" name="libnss_slurm2_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7eb66965f6e9dafc5ab096697063862bce0a296fc008b6bd003c54fd61ddd5be" name="libnss_slurm2_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="75219007e40c5ec02a7adbecded5b89cdc39dd5282fe12b2843d13454c4d533a" name="libnss_slurm2_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e228eabf533113faf4f2e7bfc4106b34bb63cf3f0c51a6484cd68555d3957025" name="libnss_slurm2_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0296e363f232fba4666ac8ce47c96e5fbaa8a75787d805e8eb7a80caa05fc231" name="libnss_slurm2_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cd509906ea65e584ae35d88af7c89485512f450cb4e8f352e0d65e2a09880939" name="libnss_slurm2_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="93771d0b66eee45ac62bd4af538ed6ba05af6e40e43f8afcdbdf74abd035920d" name="libnss_slurm2_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3403ad383d0d666ef5d5caad06b84511814f7857320cfe2125184df3ba02e3f1" name="libnss_slurm2_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="59d01d5379f73b9e33ef3df919beab71b899476603a0b5b25f7ab4be99ec2768" name="libnss_slurm2_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="b4c27b1a7104e259a47f85ddea267200e3f03ba192ccad610d57169fb589e151" name="libnuma-devel" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="d746a42ecde041327bac7437e15a913d9a1b25f0a0ce3e6038613d84a0195b93" name="libnuma-devel" arch="i586">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="db79c118fbc1313736dbdc567ad72bd5faf19b16683abe09371e8a568d3f923c" name="libnuma-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="f03b4eb662c08e73364d26de886a576a39bb646bbbfd8e998a1295366fc884c5" name="libnuma-devel" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="6131b2e98938dd643baf486be3bdfedff609fcd9578fe0f41f06209789a96fbb" name="libnuma-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="9cc6796b6864bcd80f2f156ae93806a5944e927e398efbd3320d7c3b5459af04" name="libnuma1" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="d9e24c74d60a35141858fe7cc0bb203b8f5b25ffc602d19799d83e11d27f7e2e" name="libnuma1" arch="i586">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="cb45d59daefc85fe74ed4fe653aee2f61b90e62850dd4cfc8330471aad629122" name="libnuma1" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="3e298d2d8dab38fe515c5e63dce07d08f820bb09efd28d30c6d307ca59a00768" name="libnuma1" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="d2c8fff9e8557d5b083593846c090e42f245b51f92ed669252ddbb51a75dabfd" name="libnuma1" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="69983e24f21e604be1d5639be47fb41a1372ff95725750e7ba9763f7d8c8168e" name="libnuma1-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="c9a1c9140031b1aa9ab3675d8ccf76ae40ae687c66c1bd75293172ea1598009f" name="libnuma1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="b3bb636e415c6038ece1a68a42a1f06041c49ffb02be9ef85478a25a86c82a0c" name="libobjc4" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="0391cbabce166bc54c0cdbe9d4f7366121913a311d3a16967bad5e4de6182781" name="libobjc4" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="492a4841c01123132849f1efaf76d14e3a77d0a9ae00d013946f3bc3aa77b78b" name="libobjc4" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="60f247d00c948be2bc8d227a4e6e83764e0ceb2d5aad7ab7fcea184cc7e31b91" name="libobjc4" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1832beb53d551458f2989a71291ab7e7ba4ff95d0623513b8d94c94b469570d2" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="9ca0d8c8e28e722712e894779094557d502c3da79f87517836098d80b45aaa66" name="libobjc4-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3266c6419aa4a53e1aa0af463cd1aafef238173a6ca38ca4a80a98c01a7aac5c" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="fbe2ac087ab6fb3b023464fe290f0bb12d25b61dd92018dae7d8b155e349e3a9" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="05ebea860e50d6fd423af5a905263835e742431ef05d662ac87bce84b95d898d" name="libopenmpt-devel" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="1f41faee4c3d5ce920af96e87a07fb59649e494104c1b3582007569e911dc146" name="libopenmpt-devel" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="a4efc02a199f110250ecd8fbe1af3f8195eaf07de44ddc27e43a69182ce57d40" name="libopenmpt-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="194f841816feb7a7a44697641333cc27a7358ae26cc1761aa51cfb60c58a3672" name="libopenmpt-devel" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="4be1430b5ee125aa443c84d375f52b085210649f7615af550112763663597eb1" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="8b4820da50532ed62bd7baded7876db90f8611c8808454cf3f5e6f4916ab5680" name="libopenmpt0" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="c8dfdd5409b8057097fa90d8977c9a68fba2726fc05f5555ece643b4a15562a3" name="libopenmpt0" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="86223a2569cf03d97b8cfe6bb4276795c3d29dc671d792328adc006740f4f4c9" name="libopenmpt0" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="574e314549b49efcf8ba903b466b5412b09985765a57208195da33e91458fb79" name="libopenmpt0" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="ed907e3f4606236f61ff2a9572863f50ba0a9181ae9534200cc0cadf6f998225" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="b0b84b6c06b7d9c0cd0d7062cc8847c33f3a20d45b56701a67466b1eacffab6f" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="0a63799e098fbdbc4b19756e3fef59e1fee59810d28308adfbc4a77ad0caf83c" name="libopenmpt0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="191c8c86c5495d85e036d3b12d4efcfd697fafbe783256e06b3f1dfc89082c10" name="libopenmpt_modplug1" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="2f36772c16db9a3e5b4a7d532c5275d1fbd6924fe4355cb21e403f557d987ba2" name="libopenmpt_modplug1" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="2ec973dde622571ef968874702d752b7a66cadd583dceaba91b6a8b56040c2a6" name="libopenmpt_modplug1" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="f7afbadc2a386c8920acd7dab93ea38797c74479b6a6aefff58d3f1eb15534e4" name="libopenmpt_modplug1" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="ff64cb1c4df0266a37daa40fe320ec31d7d2410141148799cd8882111a94d6ab" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="49d68177c58115d8f748ea2d4961390e51c9c0917ff02067259eb149bfe7c1bd" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="2cce8c9af117fcc35dac397429f43e29845b5832b780f1690727b7791eec7e9b" name="libopenmpt_modplug1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="9d967e3c14ac681e77781b600ce20f684dcec38888a52cba273a85846c700b5a" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1c073a4afa552fee3c473e5ec7fec6f1a8be7ede5ba190f193bfa4a639f6735d" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="0df03953778c9d4e45d76353529da8566c2b01b0fb29980c8f7d9574a3ab78ea" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1caac27f1bc4c66c013e375b591e1979cb240e4531db6ec348bd2fd452a6b8dc" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="84c2a13960c4bcf8078ab885c7243276a01961ab099d65a0b0cb4fc136602aec" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="655bd715a53e682382666700a54ecf4df610aae5bb68f9cd0275662532b5bf3f" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="be292195390b72bbac575d98ef0f7a1f0098b7f16d0e9b79b1a7a7f722920e8b" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="05f4ed98b3abfd1beedec735c2f7df0f258154b82f83f662bceb2485811f67c8" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="0e72c0e9f0421d460c785d32c0ef2516cfb38edb722dfc6f49066fa47cf2c3f3" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2706e7abd50c755ed9a4541e63e1f4954f98f17ff70e88ddffee324e387e2838" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="860f1237a37afee1947763d5c1a427e2bdf48290876bfa29a8398993d04e04d2" name="libpacemaker-devel" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="bddb5dbfe54f224618c618cf6760dd6b3fd050b6124fa20fe8a26ae24361edd0" name="libpacemaker-devel" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2ddd3841babb6acfdd2ed69d2d7214ee3b59d398c3bdc9502c49175a38555f16" name="libpacemaker-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="82e0aeb846333306855d7037e12c7711f23f622703e9bd12504a4ef6a62ab909" name="libpacemaker-devel" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d51449fe53becd13359c64ca3ecbe209547cfc19686f253561bbcda4113fa188" name="libpacemaker-devel" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="f7ed9d378379ef58b527bb0627f300384d820ac7782a92fdc6ab4182758cc6ce" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="72c769c30a9d87d25c5bdf68fc6977f8a60dc4172b990b976cd2758e7a9d10aa" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2bc15d130ec588cbb2cb85bda15c10588bfac2371558067d85169b7215fd7b59" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b236cd4017862ad100df1b1ecaec98253eb98f92e7bf7a719568b7098ac5265e" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="8a7c8ae630e9cccb5e6f4f326094daf3664cda483d8127ed8785c70aba662f04" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="3bd9997caae4c7198044e423331b7aacd6b6deff1dcefe92f5a50bea9b506d65" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="80780dd4005d16d541fca4fb40fdcd2845620b1a2d11a45a7244b4bac5637bdd" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9ecde178983f1a1e6cadd6df2ca198057293f5f4f2c9afe9b923297b56b2c632" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ed997a43aa06159e55ad0c386f471f0614deeff97bbc64c1c287672c0f207e8d" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="cff0aae6b8362c0d80dcb4061474b0351cf2dab77075b4c1fed6f525fe1e5485" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9f94c02c1f7f0af34c967395a41d7568c77b593f55ee5617f99ec6c983b16d9b" name="libpacemaker3" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="af3d18a15b6a466276c28b16724a9737c58da651f08663319ab2d75731c86913" name="libpacemaker3" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ff713f7e48feda4201493269ada4a3aae505c56c379b1b19b8916435ca9529c3" name="libpacemaker3" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b93aa6c1e2af44e9881780d113cdd8de3e7be1af74fece14d2e2dfc08c90ae43" name="libpacemaker3" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2b91ad98979a85f4802603ee4d18a783664fe14ae76158f0668a547147294a0d" name="libpacemaker3" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="584b8fa712d604a20bf884657b7f89b33ab21f7cf8aa1864d3d0c25f706ff444" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="559ff28ff5ddba4b920b0b52954fd557cf472e9d4db1756a7df9e5bb53fbf45c" name="libpmi0" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d065aa4ba70cb43b854000548aff2a84cce30546dcfca30115ac03d2967ae83c" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="682c27f7b17881a1377e9ed0392ac4e478b31dac260d9800071218e06860edeb" name="libpmi0" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c8a518ba7c36273e3631e285db78cede74ea57808bbcb38fa370eaeecee0bc72" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="345d53eb3dc8f9d419e4d2bc1d3b0c700536b763ede4bfcee9fe1b28b0a7a6be" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fe04cf6f8ca30144a777b47c843f9b073a437229bb642ca8a76e61774914ce28" name="libpmi0" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="856b08b342a031da6d6864481a8db7ceb09b03b94b25f80d1dc8f420cca20795" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="13db2a981ca818d31a56c36b98c6a1365a1fcb0e0483f8caab00d8b993de0145" name="libpmi0" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2846b4a2e5a03c640ee06e038fd822c815a9bca6bc9de2e3497a624e985cd923" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b5de4accb2c2bde54fd073851504990bba913ff5af4cd072c0a553e7ea178aac" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="949bdf6093b4a3acc402380bbeea6faf8cdadc0a5b2fa24df231d1113b339601" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bf6f844ca21a531360e21e63035ceceec6e2ae3890d9e289d21bfc14e20af417" name="libpmi0" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc06654a7d8dd55d106d57ae09db8555ce30136cefb0bc7181596d35fc6bca11" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="aa1407a7f28420d1ef671bb8846d3100116bc3ae93699fd2c76d9f0e7f0ca6d2" name="libpmi0_18_08" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2296b5cd8c54e6f5b6ffb9ec5e83548a98556ff0b13c5eeeca6c5adfcb80494f" name="libpmi0_18_08" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c0b6ed17ece5fafed3c3b4ae0f6dd6dd6eace54b28269bf40f4fa99b899005d4" name="libpmi0_18_08" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d46308db660f8a454ed8865d18c316a619077af5541a04b7b278620bd984552b" name="libpmi0_18_08" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e023fdfab250bbab191a0c0fa2fee7c915a7ec460d9bff3f76c634d0ff962f04" name="libpmi0_18_08" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5514e95e596b18e1a9aa90bc5a563642edbaab3108a8532d4b924a780a9eb6c6" name="libpmi0_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d386c467076edb3844f4fdf1a8b2859eeaaf8db8723eac1c6a84f4858ba9131" name="libpmi0_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0dbc88f9678a7af4a1e7322d153c2e29809444891d616f583b1297189f37f0d6" name="libpmi0_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e58dece78ea33db45793fbd0462cf3bb852be51dcc5f7e20d026b5e734a329bb" name="libpmi0_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6546e24046591df246d55d1eec96d83c7f2a3ed19a2dec65d3425df245f3240c" name="libpmi0_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0bd909abddf35c1425c656ce99d54b7811552304f559c7af839e14a76e218af5" name="libpmi0_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b251a2ca26711bd4baee0fd832dee46d3cde3c611928ed3dd058eb7735518d75" name="libpmi0_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="04167d6c49113f6a5791dc586fe927ea51c5bb1a901f3e98eb5b5e5ceda1c067" name="libpmi0_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5c3b3562c9886e1ce683119b2a3256f25c7a25303593591f9d444fed082d183a" name="libpmi0_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="759fa16a7d921b466e10676fbb505a35c27ece9b9c2e88d5bf2c1f68a3bae103" name="libpmi0_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="85bf9e20ac3cec8ee9beab53d935e2fbee59b301a8961e5b9dcb81e0aa3498ec" name="libpmi0_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0a22025dbb9afdc5ff8312affaa07d6cee9b7805021abd3345421cdb5a44cce7" name="libpmi0_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="6c94e6f36da151fdcb1d8f66a70730d39a935b9d5e4dcc5471417aee7fa2fe28" name="libpolkit0" arch="aarch64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="7f693f7169344268a5692bd47ee82dfb691875d185c4f7b4ae07937d25454129" name="libpolkit0" arch="i586">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="4a036bffefa274b054b8959207435379d461ad9c99dc5a0732055e16762ef845" name="libpolkit0" arch="ppc64le">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="ea522be7fcde6911f1fdd18a1890fcc91ec2d7417b5dccd4b65f0c457517812e" name="libpolkit0" arch="s390x">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="3f60212a0a35ae7579ebb220ffa612c661b63534798e63f8d7861342d441c783" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="aefa077c4af33adccbca12990024a578426b118bc8380f8a37b60fd5b89d65d0" name="libpolkit0" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="967077173681ec3cba768c35b0d4ef9a8750b1fe0e93e0eaff19951e4017dfe1" name="libpolkit0" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d79879d088cb830784d0b47cc448fd571d308cf8d6289a74ba3392fb11a336ae" name="libpolkit0" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="d9550057b27b9e7ecf3c531858e749985c7a152e7de0f4ef241589dbea2b0806" name="libpolkit0" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="38e785a8228dd000ef727c727a08e86b3e32c3705446e837348e07796f977852" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="e002b1b3ae980689308986463fd221afb93d24224682f215c9ac4fd1b8d565d1" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="0180cbab122e98cf9594580b6e57b5be064905f0c333b537ef6917c191813d07" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="21e833b4ae0e309c1947a9d5c1ee8c1df556060df18e7fa1db22ecd1f5ffd01d" name="libpolkit0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="cdb8460986100014bcf9c0579aa6b6c20d2d1255bf21af2afafd6b55e120a2b0" name="libpolkit0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="20c07f65618f107e8be90780aeba5a71094b84e79a74c801d39d2dacd19c1f4e" name="libpq5" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="8f655de3b32a4b16a4d9e06f46c4e08e82262790b1a2d8249ed9a9eb9862be2a" name="libpq5" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b17f061e4b081ba61163fcee3a9ce05dbcff015aff19a8cc8d4e1db5759255c4" name="libpq5" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e5dbdce42f2ff5a0ce8689890ef9887a8a0a8894d0fe3c56a26e8ec07cc47097" name="libpq5" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="09ff8f81ef9756016d2270738405d8f9bc58f2aad5be01396dbe4b345340c0f1" name="libpq5" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b06411500745bc6f68c7fb59453d954295bf3d13d525bf2bee7b50c03766b967" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6c595fcd1f7568e94adb2f611a6666d36a9279bac74e6f797b72a988eedfb2b2" name="libpq5-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="fb7cdaea2cdf8a9301ad3d86d98b3f143f08520f9ee622c9879cb65152ac8072" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="131a30e17342613ea179a34eab2167aa4997f5adb6a2209d9ac290021bdb4c7b" name="libpython3_6m1_0" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="fb787ffbe9b36f2d60c273e0632366a3525f24b19677c2c35ca0c93b0dd11c88" name="libpython3_6m1_0" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="88f81561cf76fc17694d579c340a5df39c7e96a65e13984d57a29dd743a55cec" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="6176952631697bbc7142a86c6d47f792feb1942fa3ab6b19f6bc45302e1db02c" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="3c11add8e1c4bfda5eba2e60e95fdc9b9815c2253f4ed21ed2092e46a4311193" name="libpython3_6m1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="34706e419e8f998411cddcfd9c1eb70495cddb3919fd2acf57d61d3a83685a2b" name="libpython3_6m1_0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="2e7fc68a2a72833dbb85dbc2c2836be77f1e6310bfb359e5ea2ac9ff4066a755" name="libquadmath0" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="1a7f34ded615849b88c8f819a30bf032df5eb39770680ad4610e1be4193fa6c4" name="libquadmath0" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d5e9570623bac939e2994b178dddfa4fab8208dde9295278da16f47fc68e41ed" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="943b7beefda78a2c461b8ec81c3eb51b4143b927c75a84612503ad81e783ef5c" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="d59bb668205991aaf98459a8a574c2f75dbc877fd20b8133a80aa255865d525a" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5f2c5efe09b9de29ef796be87d658482a12f24e7684dffc7ee26749325369b1f" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b4ea8cdf29a4eb4f584ba8a023a0465448749d94df895010685db611cc34def8" name="librados-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8f42b393e4973961c227684f79ef2b9c4c652e38732c6ff3ddcc61eb52036b68" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="867ac1384d0ddb8757b11bf91dda6e2f09f1913685d4a092791f2985081c939b" name="librados-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d5fd44096c23b7354bf38a528ba67e46c8299e9f0ad9df368fd5d850a63ea75" name="librados-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3ad4c235661d84f9b682cb2a2bb244c5e817c17509fa9db5c4d536eef5fe7cde" name="librados-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3cdf3b5e016edf103b75b32f3c6860948a548f1713e0319b82d542ef666047a1" name="librados-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="259f796323f84edbff951c90c872441ad2af9768318c232282d30c5d735e1669" name="librados2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9310e41dcd539807358ed7fafe3c6415735f4432787079c63aeefdd21dba923e" name="librados2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9d884d403cdedfcf88b6b3b6a242db39c320c8fac91d83d76f87784b737593e7" name="librados2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="384269f9eeb26db3adaf4acefd9949957f579df565c1066364df1f1165581857" name="librados2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="717a4942f70d0e6d4f03fed7318cb2f5be22b1fa5ce1b5dfd58ab0ee176f4944" name="librados2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="94a15c5a9ee6cb5624e2fc8a9c3862920a9fd3bec8c78ed216f9e8b367ebbf42" name="librados2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8b5280d92abf00063ade045d80e16ee1d22c80ae4966ae65db0d59c0d21b4022" name="librados2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="84e87a50bc00d7995a10ae1d8ecc8b885b1ae758b7a0fb5daf4845585d714029" name="librados2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="55d3807e43037dc19670a88fc39c0e5458f9e8c181c19fb26fc62c5bd5443197" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bb487296054885687252bbb1d5b5a8b97cf652806a63fcfa62df9900437f97e5" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4aa0df6083e5682f4458646b5cd6f2060e9f1c10b86ea1c55e0559f5ba74ef99" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f5111ef946d11aff2dbb3b5c933a461f08d0c005b7947bb797d3e11bb9a074b6" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2cfb0de3c9cae0737481c24f79b127ef7baf7dda0eb763868ad0f6932f1aa7ad" name="libradospp-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="01529a2c82b63b07421884c84a44f5f675b7a8d8ed1397baa64e77d0a25c5bab" name="libradospp-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dab3e3236e250390e0929bb3d129ddafa1d49688f5a80a434d18e50cba517cb4" name="libradospp-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cf2c3f41987b8c7407ea550a043ced8a805a7904e0a88b1f7ef419db72bcc2cd" name="libradospp-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="358f6cadece9666139b15fd3542d77852a3d9a820d1bc2d56561ada693421e75" name="libraw" arch="src">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="55a444a4abb062b952033ca3caa7184694cfaa435a5173d010c8d513d22dda05" name="libraw-devel" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b7d897a72f3893b80ddf80ece5360cc369aae232bc49118dd6a87a3477452cab" name="libraw-devel" arch="i586">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="290f92db45f3ecd384a4fd38ba931a8db1967a4a041da02aec17bf06ad15b9ed" name="libraw-devel" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="c3a81f9f49f49be4b2de7c43ea79a7bda3163b28e70e9a1e96d2fbb8bff72a7e" name="libraw-devel" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="8956ed5dd587c98230d5695fe66c83507e3e889a6723804a7e74ab3db02167c6" name="libraw-devel" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b2ed61702d4f38a7c3d604f485ecee986975aab011d12a3353299323a7ba99ad" name="libraw-devel-static" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="22debf406bc1aacfdf20b9a2b66e994e6cee18ebeaab6f80dabf4f6a3a06df93" name="libraw-devel-static" arch="i586">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="fbcf033d1f5b3e866f03502f365d764a56dd5e1b8e1a3d0e8cf0e7575d849e25" name="libraw-devel-static" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="8cc360330d0099c67453bfcc6cf0e1ec8279bc876276610abe20d78d685bd8c4" name="libraw-devel-static" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="4eb353201607a31a49b8c62f5b1f76b29dca9f099470e528c6485e8e12ab3c74" name="libraw-devel-static" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="c8a57b3ff9987bb0687b42a2c8a1d05624110eab234f4e3ac3242ee5a471912e" name="libraw-tools" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="3ccc8064ad7d086eced1d02b45f539d759f2e0522080ddf104d668aeb9f99231" name="libraw-tools" arch="i586">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="44577f99c4b950c31ba9fb1af7fb49b36ba2ab3109838b835e50d7b5e34fdc3d" name="libraw-tools" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="752a6c8f3d4569544867b6c1a08ee3efc26baeb2e173a3e228dc5dd20e9ac6bf" name="libraw-tools" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="422c9511d7bcbe71f9c93ccd5b6f7a1b6729e9988e21ccd9c7abf48dd2b5f0ff" name="libraw-tools" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b740a8adbb49121c1fae36e549fb8b5ec40be2795b2f2bdfb32b73dd13963536" name="libraw16" arch="aarch64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="67d05cb889323d4edb9ec9fe45b12fcfaefa8e1f1dcea9c66a868c9517b4cc31" name="libraw16" arch="i586">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="fb4bb3bac125221d2dc670c74b2af404a793b9a71fc6ab30e2f9301f418cc1ae" name="libraw16" arch="ppc64le">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="b9a209744cbdfa8a6d414be97f0a743505f7d9f5eb6a9d40744fca2c039801a2" name="libraw16" arch="s390x">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="f61662c2ca7cc58faf5514670a96b9d2015f6280f4cede01059ccb01e638161c" name="libraw16" arch="x86_64">
  <version epoch="0" ver="0.18.9" rel="3.14.1"/>
  <changelog author="pgajdos@suse.com" date="1518177600">- fix build with glibc 2.27 [bsc#1079853]
  + libraw-glibc-2.27.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1520596800">- Updated to version 0.18.8:
  * leaf_hdr_load_raw: check for image pointer for demosaiced raw
  * NOKIARAW parser: check image dimensions readed from file
  * quicktake_100_load_raw: check width/height limits
- Dropped libraw-glibc-2.27.patch: No longer needed</changelog>
  <changelog author="kbabioch@suse.com" date="1525089600">- Updated to version 0.18.9:
  * samsung_load_raw: possible buffer overrun
  * rollei_load_raw: possible buffer overrun
  * nikon_coolscan_load_raw: possible buffer overrun, possible NULL pointer
  * find_green: possible stack overrun
  * parse_exif: possible stack overrun</changelog>
  <changelog author="pgajdos@suse.com" date="1525089601">- security update
  * CVE-2018-10528 [bsc#1091345]
    + libraw-CVE-2018-10528.patch
  * CVE-2018-10529 [bsc#1091346]
    + libraw-CVE-2018-10529.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533124800">- security update
  * CVE-2018-5813 [bsc#1103200]
    + libraw-CVE-2018-5813.patch
  * CVE-2018-5815 [bsc#1103206]
    + libraw-CVE-2018-5815.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1545220800">- security update
  * CVE-2018-5816 [bsc#1097975]
    + libraw-CVE-2018-5816.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1546948800">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1546948801">- security update
  * CVE-2018-20337 [bsc#1120519]
    + libraw-CVE-2018-20337.patch
  * CVE-2018-20365 [bsc#1120500]
    CVE-2018-20364 [bsc#1120499]
    CVE-2018-20363 [bsc#1120498]
    + libraw-CVE-2018-20363,20364,20365.patch
  * CVE-2018-5817 [bsc#1120515]
    CVE-2018-5818 [bsc#1120516]
    CVE-2018-5819 [bsc#1120517]
    + libraw-CVE-2018-5817,5818,5819.patch
  * supplementary fix for https://github.com/LibRaw/LibRaw/issues/195
    + libraw-half-size-allocation-buffer-overflow.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1594123200">- security update
- added patches
  fix CVE-2020-15503 [bsc#1173674], lack of thumbnail size range check can lead to buffer overflow
  + libraw-CVE-2020-15503.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
</package>
<package pkgid="933ee611d25bd1d44e2bd9c76a24b99ce784902c74ff73d770bbf816b873bd0b" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="85ef970441f6662275e258343f34dabce69e81c1f24e5f74ab5b84219e7db4c2" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8c99ea8335387b545b906e9214ebc9dd2c10701106dce0777c96f3cc6d41b4fd" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="936e419067cff369b0e828827623ae5d25d9fd7af13e0b37c2d671bca5240962" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c0660071e54f507de4bd173890abd16a544502b5e8610f7bd9f4f65302fd70e2" name="librbd-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6bd846ea66c84bc624751f005792b5eeff4fb87b51c1caf5d4172ecd3ab9a7cd" name="librbd-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8d3b04095f29d61d1eda9b1ecaffdfd14e602609d9e0687f891fd36dd3accceb" name="librbd-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a8e4afbdc868904a0e9d6ca64a896d18979fd048275ebb4479f2380d133bfd50" name="librbd-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="128537f5509c9b2ad65291fbbf55f9b9634fe52f9c12e13556282b7ba434a292" name="librbd1" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b5d315965c79597e1d9a2d1ab8b13f4905431059f466ca12284a321e8b260d3d" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4ab6d1f3c5ff11b89a434f585d2757cea22b6e5fd40ae6bce7d8b59eceb793aa" name="librbd1" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2146fbf00b0a5f9efb0ba76fa552a55b62b741e1c4c9f4477084ef6a71509688" name="librbd1" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fa1bdc495a1f63cdd8f1ce0ccde7635c0a22198471dc7d330852d1d0a1f59e94" name="librbd1" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="934645f78d38473520c889e9fc885e89cbcb132e326f3f10437fdd61a0ac4f0d" name="librbd1" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc61c7e643fb29d4abf1c4a6f643d4e007e28569ec44f98bbbfc7478f7c8c681" name="librbd1" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="67ecf3d0488d6f04f9bff76cfefc5e586bc182515e270cf29cc2308b862b7261" name="librbd1" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ef67db2e60eb6ba290bdffaf2fe45cabe0242559fdbbec3c740fdc203525db35" name="libreadline7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="873a26722c1bc5f75bbe9da1c25228797594df9a6d06d3b3f2c396e8b854d39e" name="libreadline7-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="018c1a393dedffccfd739741e589e61df5fb471f0ba0bc314a70fcb99ee16658" name="libreadline7" arch="aarch64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="31d6a718b5c7dfef6b714e0953601e0b4bbb7a7dd137bece16fac881766120ac" name="libreadline7" arch="i586">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bc66a9413545b3628518efa083548a5f1772afb547cc0dd6e0e06baa577767b8" name="libreadline7" arch="ppc64le">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bb6b0fdff3b10b82960254a4f7d9ae8d8506f29321b503482bbd99efa231451a" name="libreadline7" arch="s390x">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="52ef5774dd8a2f1f7d439a53c34778c50f5bb84704158bf74b74961906818772" name="libreadline7" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="7601e5e259be744fcd466ee507b8bebe01499db7b839f6de2b14ee184035e6fb" name="libreoffice" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4aba1a3cab1c87949c1d52b52bb6ea4ab7d8d018145af969553e676099b7efa8" name="libreoffice" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="15a437555e43c1fca74533c91d4fcfc5a588115936800bd473934e5db8532e34" name="libreoffice" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b9440fea150337c540414f0f5d6e60871110ee4c27e07883b4735ba11fc51b75" name="libreoffice" arch="src">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e978436b66ac1e25ac96949bb8bb7535517a0f8a2fb386ff58b904e85fc3a0df" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8d91fd15286352b16305030dad8880d7806dd6fa9636b4278195b1dc36d6b405" name="libreoffice-base" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0146dc3fec843f304f6a4f398154464ffb53fa54d7885d3518e14d975502b0d0" name="libreoffice-base" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="30ff0b3b7d573548ba9a1bd0fa4c7a429016001a484b77eaa6801df858310f25" name="libreoffice-base" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6da57f537c56d1e52bdcb2ec1237a9a45fb3c42535fcd8634616329360b5f1e5" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="de33a1707ea5ad6a46a0a193413e16e7e1e7f7a2ec340e22ddde6ed86eb9e866" name="libreoffice-base-drivers-postgresql" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fe2c7a121dc4aed09eb7807c1d4a1220c0d1463816739773b85d530c9dc8ffe8" name="libreoffice-base-drivers-postgresql" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ae716e7a0f5c980cdd1d796ad8798ac33f1a090c9fe87204f5f486f43c3892ae" name="libreoffice-base-drivers-postgresql" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="507d01b323b0452b3ed9708379b388a8c13d392f33be8c45c2a9c3649937cd1a" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="198dcdcfaccbdbfa0fd5ea3b64203fd081cc19a69b6eef3781e7704a65046c4c" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fce2a49c5922f65a24c36bbfcc6a4c9c2187b756aa8102c2b5544b411716d977" name="libreoffice-calc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d12efffecac4e687a3180bebfcb8f221a239a9e090451bde59a62f5e34fb4a8e" name="libreoffice-calc" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9b7495c29599d9aadae815f27fc197d0a864c5e8697b41c67330a0b135135dd2" name="libreoffice-calc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9eb6598e5b784ac4b1490248735da01c27ef700b766ff132907b1792b4db6831" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="75b2ade42d2a55a25904f611342282ea2030a482d509f07101cdda3f94d23c34" name="libreoffice-calc-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1c23f780eb1f355d2c8ce59d7ddebc89c7849979e52da95ba5ba0ab849361cfb" name="libreoffice-calc-extensions" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a8becb4edff61959c6de20abab651fb3be17f08f9c49e721c7409c12d1c443e7" name="libreoffice-calc-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="dd70f716002a53377ed37725823cff042ecf4aa2257c3b6f5922df963933e7b7" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="102560bdf17cbf01088e0fca1f339cf5bb2a7e8d22041ba734c7d5687041830f" name="libreoffice-draw" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="07fc8b1124b1dd8101336699e9b4476998b84a1dc7607597b931038d0bd27cac" name="libreoffice-draw" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4809db8008fa0b90803545becf17e9f5ed7d6dd411386a97415466ced6546549" name="libreoffice-draw" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7e7c0cadadcd7a7dbed88434287f99145f9fb3fea009b93b974f75377336c784" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="780166dd6c886ae8b8276db3930feb55f61109ce636697be482bd377742026a7" name="libreoffice-filters-optional" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4f7fe96155de941678c11c6e7767d62fdd8317393d5f66e94026f4f08a62ca39" name="libreoffice-filters-optional" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2c093b09f121ed3923e62175895e42c40260bdbcf326e1a7fa2675808ad94814" name="libreoffice-filters-optional" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cd9271299c5e21a52996f7da57ee0b98595526e5fde09bd8921b396e45a33492" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="22c712736703d42241e8d4ac620a4d1af8ff0806b4fbfc97983b509c31f7f271" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c39751af8e694a8952f16ebae0639229477f60419c3c3ae71322b4c6c15af582" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e6a84e5e62f7583be1db589c9ade388b440dbf3a3df3f9e4fa44d5c46c9fd763" name="libreoffice-gnome" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="57a7d9ada54e5d8c1bae115a3e7b4b6eb76698055b4a9aa5e2278c069be7b230" name="libreoffice-gnome" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9fcfbc519cc45a72eada1e3ef6401cd9059928dfb3fe2228ade3cf2024622f26" name="libreoffice-gnome" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="00a5a1eb6c5d92d6aebb18dccf700185b5de04ed7264c3fd2e8bb0a46262c9ac" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c93ce33c391ab717e0b58e5008dfeadaa47e6f820875f453e63bb8ce41dfa2a5" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c4a905ab123cbd68ef485b912f45063ef51cbb7531d9898e18040427b59aa586" name="libreoffice-gtk3" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d6bc42e8065dc2496c05067325ece8ab2371abf988c5adebbb99f553e2a9f704" name="libreoffice-gtk3" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="187e9e2cc0c066b3e10303934df49691e9c994daad5f1434a006d25b332b57ce" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="913becc42238dafb7a685065ba3f373743a63d664d5bf872776048c998c0d6a5" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c9d8e812b4165bfdd39fc67ee69684d37c9e14d2a2e4f305a83b8ad6cc7e0a5c" name="libreoffice-impress" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e2abf2d1d39d370b429791c268b451ec3bfdcbb6015467611daf29654605cc91" name="libreoffice-impress" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0757d5cad8e41e053fe1df8607e7b7b9b14755a17c661814b5b5fb685afe363a" name="libreoffice-impress" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1c6d81dcedc78b79a0130128cf66d3ef12cf1bb5a99c9df519baeab8d5f1f337" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="fcfaa7669348bfe95844732366d0d39b00fdc23a2c21a43b61aa78eb8075516b" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c664b35d00ad8beebaa8b7542baa684a73a0b0cd4eadbf514d16f6c6ffa64929" name="libreoffice-l10n-am" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7ad417894e218b469d2326e3acd096870556b48c77c829b0311eb7574109604d" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3f0bdc7baf7efd68902a65b219c8ae267a346b3237e6c9ffd491fa13f632c2ca" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a8e506eff17e3f8a6f58976cde5385bc00668fbfefb5c72e3519aa6a9fdbfa0c" name="libreoffice-l10n-ast" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7593f7bdf9d8a3e79fd9180fb723e687ddf30f1f9dec93e7edf83a6d8a7118bb" name="libreoffice-l10n-be" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c179214b8a415696416f606ae95a47fc75130d520140ad93e75b83164b32817c" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3e64aaabe89901ba1e08e9c44256fee22fecade8ee26b6fd66089825b72ae9d1" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c3538172b3f3f72ae3b56225f2d5cedc50a0a41ca26eee04bee667860fb99711" name="libreoffice-l10n-bn_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7df7affcde02f1086e0f535c957115972f6b4b3c7c20abd5fb1a9f47b4f709b0" name="libreoffice-l10n-bo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="eb517d82c7b2480f88fe3cb2f8859912c0c92eaa97da3aa6e747cf409870b37a" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b1243d5e219c6d0d38bd14976cc39bbf7ce025371ddc0c4751e6bec7e01f0936" name="libreoffice-l10n-brx" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="532aeca213ecbbea7c7c6702f0c60751cf34e9e5f841a86b0ac4894c978b5ed7" name="libreoffice-l10n-bs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cbad9d97920e258a584801a726736cfc6c22a7ef71726b1b95b07a8f0eb68f03" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="87d91ec4bd785758962de648a9fb6131a62682deb65175fb1eecce98c80f22db" name="libreoffice-l10n-ca_valencia" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0fd56f71f0415e2d22886ceb1889709e1139594b1ec88248e704b5065fe557b6" name="libreoffice-l10n-ckb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="396665989a47ffe6fae138a2c934aea21eb49d973c9de089fd2ca5505a022013" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8fd082dad2c3e520cf0505ce64ac8b83670db2e308d89ede9471f28e93768b16" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5cd5a675c3b84a2d38a21e06a49e7586a7a493ec6409d1eb7d0a5e837eba5f5d" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9abb7e5c204f063b0f2318b0a67b92f041d50ec22ad1573e5e8c5544f11a704e" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ee27373d1b4a13117689caa5857860e2d7fb6776cfaac8283d03fa98dd6acfd7" name="libreoffice-l10n-dgo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4bb8948839a5ff00d43590f0bba7bb1930c3ebfa9e4edb733672b4277fa390c5" name="libreoffice-l10n-dsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="953412187a573a4e9c7771c07429e89499f185e47ee05285c5604758a6c20263" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c21f7c14a62f5d6ac7e0085a435287b257bfb1c379b60a64cef494ef4ffeff4e" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a7dd1e70274bc180c7a6e1414196ee8d9578645020a06ef51f67ba0ca90a4d10" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="08b280a98e4fa67022cc090e0159b901c8ec59c7c6b53835ef1b6b8e63b5026b" name="libreoffice-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5622dd55514b4a9031bd32c3fa6cfd513b155e1c6e0925e76922fa29e8c0c593" name="libreoffice-l10n-en_ZA" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1bc730ea5d0d3cb1df13ba36a433eaa045abeb04d7fcf8945883bc0caa9b4969" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="218b2a10f38ae14ebefe41a348e3e8b414ebb02a29da30b0036176e2af812605" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4d83473f8d0fdbe24c77e6fe633e57fe11643b3112ab395d5d33524bb748e9ab" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bd25c968cb4056090265c79bf58963cd4d5c53fcd44440b8f70bafe576d53bbe" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f6f5e4756f819efe7aac58f2695c43989c35b6c277b5f8ec5ded530b28a14c43" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5569f2e804c79c23869234015ee36a1ed1e3c0dcb94826f52965cdd0f2ff0e4d" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aeda0e0a46072e868ca01af3e0d84a518d73909a4c611187d5c4333a1a1d09e0" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f238233f21b08c9248bccab25602ba1c9493cf187a542d76acf83f0f0e167ad5" name="libreoffice-l10n-fur" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d4393b50c00e8b821de05ca625e05be1c98ecd851fb3ac5714550ca94c7c4b99" name="libreoffice-l10n-fy" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9994dd7b010e2d28d2c05f5c0bae44529942f70e00a45afd4b1632d5c5667e56" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4d1765b63ce52866111f4ac9b742a63f095f980923171445d04da5d06001c075" name="libreoffice-l10n-gd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aff31d97d514faeec65fdeaa7703dd87ce580d4dd14806523e670698c3248d34" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d8028f96ac45dbefc2dcb2f02acf7e982c062f279c124146dc63d6cc22d1cf29" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2d4ebd2f3d8af1c8df5e07d188362e5f497e29330e047ef9a8609899c9dfbf3f" name="libreoffice-l10n-gug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2579ee091b9ed83391c11954be4060e7aef6a3074b590c4b46cc5ec452fbe754" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="58d18a0465fc9efb85a222bdedbd59341a95e80f0660d0e8cb05ff29ddde84e0" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d19fe7f0b3fdb8aebf02aa7acec584adca6c79e89a74ec8e457ea606d4c684b9" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c9a2111209dd78e7bc0c6a0e28d570fa05fc5153cc60a891d5bd19b98589e2fe" name="libreoffice-l10n-hsb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d4edc9d29c66e6ecfacf4c3d93a6adeaed898f8fd9cffab4381be7e312320837" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8fc2f8186fa9661e86328440dd2b3533622d13c222290bbc86f1dee973f63da3" name="libreoffice-l10n-id" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ad2002c5dd7786946891db5ee09d977c9edc549a2c099f1c73baeb341684dcbe" name="libreoffice-l10n-is" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="62a12e92e53e16302dc6e4b618078b9b9ebc7660d8a124668d13e06280836623" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bec533b90905c17212a6355d96443d64d8ebceedf7c53e83ebcdae4251375992" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6d7451d96655d7123059d810e12eb0a635e05f5544c8d4b2e93ac718ddcf8a8e" name="libreoffice-l10n-ka" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="35ccc30e6a7cde4e146e584dbf84c8e958678aac4ae468ba082fce5efa0bd01e" name="libreoffice-l10n-kab" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f32abf9c9a126b455408bc9340c1e69d3475f97559f384b4b082eaaae9a924c8" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="84ce2c2dff1b8c0eb48c69edec5f721d0213604663708e2149603431961cc951" name="libreoffice-l10n-km" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="59d70444a03ea401dfaa5456212c75985da5c246a849beadc960de1f369a9398" name="libreoffice-l10n-kmr_Latn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ce3aaa9d9b469006b903c10ee24d32cfea0dc78fd1816e6a2fe762ec54128156" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bbdd8ef87a5e1c8ac3728033be8fe60a1c7a87a0ed4789af6e81123b54c0423d" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9505c6e378c2d463ad8f8be4f1ae73adc706418560328cfe1c1c668832e993ac" name="libreoffice-l10n-kok" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ab4d2a20f6c847938816f2a0dd8204a0bd1d5fc8127ba118f97ad94a91f52fb7" name="libreoffice-l10n-ks" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9376c1c0835c0955c5559b83e7850196ea10bc97cda1061fddc3d95c31a90f50" name="libreoffice-l10n-lb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="93ce42eaa97d19af1318388b86fbef8bb3b507032eb69e560eaab90487c3fa65" name="libreoffice-l10n-lo" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a1e0bccdb2de936c3068617d5fca9d5a66d481e01121be08404b75dc3add1fb5" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5ace43e8b6048ca46a62a39f348720a1794b563520ea91cce406c81ea9d8bd1a" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4d4b1f2eb22d13e2b67be0ba24dee9d6b92bba73893bfe10c10880a55a157e31" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="41cf0dff7aa425792bfd20e685ba1519b2158c98d67bfa8609cb457fa9f0947d" name="libreoffice-l10n-mk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9dc9503017c06b17aaa64d526733dbb9ac66d5626d1d21619d34c1958f91bd80" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b28552767fcc699b1291ecafb8cd77059ec125cfc6a3a9c7c4e5625fc2fbc79f" name="libreoffice-l10n-mn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ab960f8b18eb0a66ba720f23720934c2e295c73f85c1d618cade0111aeeb664e" name="libreoffice-l10n-mni" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="3745e3f345469b5f842ab83974c27bc00b9279e04bfa3c62e1040d86b82ebfdd" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bf13fb344542619645bb71ec54047533b7ba15666f6749220194924a4f0ed205" name="libreoffice-l10n-my" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="94ed328f2634c2815a490b3a93e387cea82e79d80ec3481c49c9e4bb8255f890" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="76628473089308170dabae98e061138aed89a1c759781545194d885a82cee342" name="libreoffice-l10n-ne" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c2da54cb9bcac87dc076df122eac1c21df5b397a245d06cec41cbabe1227600f" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2e42829c1de1c222ff125b78830ea4865eaf60fba5b705895ccedf29a23ff2cf" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0b0c9ac005bccc36b07f7d7f379c396b2717e163b065ac1d02474175595bf01f" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e9bcf77b6946e61aa439537425c08f6458f5886f0dbf994bb3e8db49a85a5950" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="876eec941ec2fc02fb628a2b6f043cf84c58f7d456f82eed41c9ddcf04b0b18e" name="libreoffice-l10n-oc" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="be1de0e0ac0427fd6be0f592076f207ce8ba103e791f191c10e4fe452923cf37" name="libreoffice-l10n-om" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a4310fd1e28bb2bcc7d280afe4815bf2cd80440538108de297feb19a5292ccc9" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="59fb29c957b7bb3905e949d1c05fd16668359516166e838b0da8a38c376fbd17" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="21f75785f7c48c2bc9c54729f33998969eec51f2e6f3bb90ac16605027856d69" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="35e3f2355a526b25b958f40519226a9f3a1a96690f1b865e7c5f4bb82056a241" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1c4d85fe981298d37b0fc5af84e3bdfdc965acf95dbea0841331a92b73f59966" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="121511793e1d3d2807427483173c2eddc0f37017bcab19c1a2aec63a19d77920" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4d0ac4c2a7549486e6535d1065ee4e1d111b152bc36357f81736d5d67b92da2c" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="35550b731800bb8c3e2aaf275b64d69f3ab25489355fe4e2a7008c4306b588f2" name="libreoffice-l10n-rw" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="925452c0100c20b2d012b0ab3afa4650d0b1576b8d3b3b65b119f22580a3a7bd" name="libreoffice-l10n-sa_IN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4087456cdd8bf5481083079e4c8d10be0d4d0f1067e4a3e21e616adf7e5e7620" name="libreoffice-l10n-sat" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="55e2058c31828f572006bfb4b7d83997ddd4bc87e338c1086067aad926b6f47a" name="libreoffice-l10n-sd" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a92fe71e8a2ea84eeca8b89a15e613344c49541985ca6b624490c878e68e6f8f" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="058375f238f2c9f82accffd78f5070e82a82747a6e01498df06bea231df1b985" name="libreoffice-l10n-sid" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="87c4438bd865c4ec68a57edd0c34ca8cb92387ce2cfcc038ff723335698dfbad" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4f689577e5e93966e95a7392178d2a17e8a0a26a48216162bd9c8273a64106e2" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e57466d0333c6d6c0c84d3668695e42c3901633ead6fc62dc15769ac19a5c29b" name="libreoffice-l10n-sq" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b1c89fbe476475ab5c6bf95dc94fe04b09a26ef595e6e68c9c2736b2e9446305" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="8ec34de63771359ffabe9bc701bf922dee7839cebfe3493e4a1b18347db0e78a" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="9b5c78fe46dae44ed99bd143847eb85613e1106d9e99f2f3d04c2cf21bbfac42" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="85a02383bbf8ade5990c9e9e7f2c441c3e5ac15a798ceb475e3954c08ab03de6" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2f2bd016a400c36b1f3f5ee0398d74d2b0ff5befcc04fe49f3de6a208a7901dc" name="libreoffice-l10n-sw_TZ" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a57f04509fe0fa5aefa53915119cdc3b3add75e24e8aa56c08bc018a666c154d" name="libreoffice-l10n-szl" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bb2bcb6af42d944e906cab82ebb8652e2e8eb7aaf7ad3cc3cb185f847e8bcd16" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="95f8c81f6daf7727411c73f15572b9591d8096ef22d59739a3780ac38533cf58" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="53a6604eaff910ed791b53ff29a9c00fbb38819ae1b5e8fa5f16f31e3dac50fa" name="libreoffice-l10n-tg" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f97c3be53b540369b5d367b2d3d9426376e2821c5dd304363b5bf69c7a836cc2" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a58271e22d255c55bdb7b2f5310231607e0582ebe33309cd78501aaa8f5a6b3a" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="496d180ce4b917945cabef59b9c1f11e2a5d73be948f6e37663aee340a17cccc" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5e9b527f0c38204e62bf930f53d5061e1727d8574a41388c95d7993dbd1fb9e6" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="bf851a4918a8d6a500395fa8c18974bf3d7153470c61efb06e98c3cd4d082d19" name="libreoffice-l10n-tt" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="4f87d708c976a79253f57ca84940cf915143be1d55a7986d501053ec93c52b76" name="libreoffice-l10n-ug" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="df7cd8ecc860d3206b1f11caa1c718fca96e06ef937d62147943bc2ec2e3fbf5" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="841118bf102a4cced32f53a63243e3dac1189209f1dcc10a76299a0a0eaa2cef" name="libreoffice-l10n-uz" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e81cec21ac85d91cf832bba6310f2acf7dcb4b4198905efb3b651790897186f3" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="53f41682ab945051ff4da4e9f0a5ce0063bd80f037bfd1dc52a5e87dc4952ed8" name="libreoffice-l10n-vec" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="031ad1a1bdd5b9693fb9112c1b7f3150401d2eccac6ec5fcc248d7a618c9a70a" name="libreoffice-l10n-vi" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cb0bc86e70c5a0cade4ef4533876f01bed88a374746260245be464b7a1c94cd1" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b6eb6724225444f241479d559ce6458a0b28276afcc1cff7f6cab0c3617fdc3a" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="50bd11088f6651f002c55739394b98176ee8e22a5fd0749a0793a1e4fb8a1d09" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a8e11995d33c47f471ba6467ac78153548200bbc3f9532c84d54811891c05ea1" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="b532a670a5a75be4150e753815eda0a2ace123f708f618a24c7f0e17fdd6afbd" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="16835fdfbac4d92aeff1237d9d1c4c2591239d3f0f4c007e3cfabf17bcbc68eb" name="libreoffice-librelogo" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="453fb3fdf1333962263107c52fbfe0dc392c6b58961ee50f325d6a023028aaae" name="libreoffice-librelogo" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ade354ffbf373aac33bbf9e0dc39e5580997dd31271449a531abc0a3c4442fc5" name="libreoffice-librelogo" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="359670198aefa7511f44ec6137c35814a17d129ab539a90d1b674fba1f672a00" name="libreoffice-mailmerge" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0a2e9b7f4674f6e7a4f0a4fc3420e3910600e98034ceb75b39afff7e81bd1e9e" name="libreoffice-mailmerge" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="aa9b11be2d6e3a197f5c85aba93101394b3581a771c635d7d5c3aeec38cea861" name="libreoffice-mailmerge" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6b56842320db537d9f4e1ce4117351fa99b44a8d631f4d225617924066b1f7c5" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="837fd53fe9360a5357e20d9cc9add3c0f41982d062e6b6aec531a59cbb82e216" name="libreoffice-math" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="1e1275c591dee0de13f3b40d72f904220decd8042b3eac7175a35e1cd1590f7a" name="libreoffice-math" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="5d69ccb3629fe5ff4abebb0e54fb00760c2867a4f31f41d243079127728ab9da" name="libreoffice-math" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="753863f55b620864bb43dc84c0075a07c0f0345ca950367555be789787ef671a" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="be9f0d8c5c204b06624f173f0614b1932393b15b62cd6062173fc8209637b158" name="libreoffice-officebean" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="670530074542ccf090116f85d0e88e7bf36d3275c20aae11ac10bd9ce0c01c78" name="libreoffice-officebean" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e389668a3281e2fe5010037e7f4c92c2e4cca44f27ad85bf1b4c74fa688cdbd0" name="libreoffice-officebean" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c7ea092bd3bd1cee40a2ead4db25e542dd62ed4690bf65d507358a16003397ba" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0aaf30dd8cdc14ef0e7eaf619a540732530b8f46e97af2dadd82967e52930ff9" name="libreoffice-pyuno" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="efa7fe73591f8cd86503eeb708f40fec54c7c9a61383560412b9eaae02f8e7c5" name="libreoffice-pyuno" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7d835c6f06e07b21734da79d536fe95e26c66d15281086a52aca4bcae4d317e4" name="libreoffice-pyuno" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="be92a35c0f96cdc1fbbce05e46ffffec15073ff6dd6fa4dd8403c80ad4a43355" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a4aec3a131dedf3e492dea5f74cfae9d775010639f8bc33b9e2dd2dac4aa99b3" name="libreoffice-sdk" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a61f699a1b5635c6219f04b9dda0fd649cf5d25bb7a84684e96544219f325e0f" name="libreoffice-sdk" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7e004221845740f8c3e9d52be00af3082104b3ad85300e57507f8a4ba1f2924d" name="libreoffice-sdk" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="f6dc8a959ffc488acc6bf35f774cbfb0639ffeec252194df369d17221d169520" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d6e14bb6bdfc49e47a6ab230e3ff9a941594d388c35a571bdb1bed3e222bf474" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="a3eae6335b58a7b8bdddcc6a67fa61810da2a59adf427b7900c23ce81f297480" name="libreoffice-sdk-doc" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e493c68ff83962a767a3fdcda0a362fb3c6a9b9feed6e1352b02d42b3756a3e1" name="libreoffice-sdk-doc" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d30648b7a4ceb2ab1c8b06eba2408c211c6129fa0d7a4674c76349121e7d5c56" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="6cfd9054ba2aa0affa679f6de29520c8ac02c3018f72fb872bac99776bfc0f58" name="libreoffice-writer" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="0142f8d6af9b4243862f566d119a432faf26023954b532910db460bb3d2c7940" name="libreoffice-writer" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="d8264d1aa5ca363c4190052cf2fd4f0982c50f84e0e34f1c44a59de59b93f4f3" name="libreoffice-writer" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="7111f98d72c8cf8034fc6da5797b682c9118ccadaffa57d40287c33a32f84433" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="badc620b71b26ebe01a511fbe3168fa1633a8749d725af09d3b2e401851f9a4b" name="libreoffice-writer-extensions" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="2b04fe40753e2f4f01e279e6601c17a6d969df24701fc0b7842aee373ed1b326" name="libreoffice-writer-extensions" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="44628d7760af924a5aa75172fa2a5478a9a16464cd87f9a3fac84299367d81bc" name="libreoffice-writer-extensions" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="ddb12a9f42b13079786e701e80d3b875d842a19ccedaab68dbd24cf765772976" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="da09b952fefa592dae4e61e12dac41a42074af9250b2d7c0dd97fb849bc60402" name="libreofficekit" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="e662274e47a31c7d8069fb0f23b2db91f2f4f37eef18a6355cb62ed661b80e6d" name="libreofficekit" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="937d1e0d6d25ae4cc9d38a115f8b2fb61aa69885713be53aec266b464cbb4bbd" name="libreofficekit" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="149d119fa4b26b5a9c7fec54b4b41c406cfd91788bd78a7166b1f39bcc59ac8e" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="c43f7e243ab185cef0550f23853e2a257a4ea4c0df2eb2d6f9353c2c9798973e" name="libreofficekit-devel" arch="aarch64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="cb430fc592921c48ad00a6f56fefb6bc5727edfa26707fa8d6a6160fc43cb722" name="libreofficekit-devel" arch="i586">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="13c38cceab48a08ff97a4cf146e44e3c202f85a3447c508d97c8f9f654f2d8ee" name="libreofficekit-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="334dd817191e0415afdc2d1728991a9e8638becaaae50ae8e7d39ed2ed881c47" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="7.1.3.2" rel="13.21.2"/>
  <changelog author="andras.timar@collabora.com" date="1617278400">- Fix bsc#1182970 - LO-L3: PPTX: image styles that clip images into curvy shapes missing (and images shown rectangular)
  * bsc1182970.patch</changelog>
  <changelog author="mmachova@suse.com" date="1617710400">- Adjust the package to work on SLE-12-SP5
  * bundle boost and icu
  * add patches 0001-Revert-java-9-changes.patch and
    0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch</changelog>
  <changelog author="mmachova@suse.com" date="1618920000">- Install qt5 plugin when the desktop environment needs it (boo#1184596)</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- Update to 7.1.3.2
  * 7.1.3 final release
- Drop merged patches:
  * 0002-fix-the-endif-placement-for-GTK_CHECK_VERSION.patch
  * bsc1182970.patch
- Add temporary 0001-Revert-rhbz-1931423.patch (bsc#1184961, bsc#1184527)
  * libreoffice oomath does not ask to save changes when closing document</changelog>
  <changelog author="mmachova@suse.com" date="1620129600">- Add bsc1184961.patch to fix bsc#1184961 more cleanly
- Drop 0001-Revert-rhbz-1931423.patch</changelog>
  <changelog author="mmachova@suse.com" date="1620993600">- libreoffice requires at least java 1.8.0 to run properly
- mention some forgotten issues in the changelog</changelog>
  <changelog author="mliska@suse.cz" date="1621339200">- Add gcc11-fix-error.patch as fix for boo#1186110.</changelog>
  <changelog author="mmachova@suse.com" date="1621425600">- Recommend libreoffice-qt5 only when it is actually created</changelog>
  <changelog author="andras.timar@collabora.com" date="1622030400">- Fix bsc#1185505 - LO-L3: Text highlight "bleeds" when saving as PPTX
  * bsc1185505.patch</changelog>
  <changelog author="mmachova@suse.com" date="1622116800">- Fix bsc#1185797:  Searching in PPTX document makes LibreOffice crash
  * bsc1185797.patch</changelog>
</package>
<package pkgid="77d40541a3f7f23b3da43eae188bf4b50b36c116c4fb2a9c8cc7b5264bc560b2" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="604881b5faa3692d50171a7da855b4cc650ee4a56a687bba7c00d2eed1a438f8" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4959dcd9fdc53824d25b065e64e934a220b9c654b4e1efb0e1bc579aeea5df0c" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="375e30c83371a5fc0de10d994abca03f9971ba660ecdecd557b22a3142cd8bd4" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="086b816921e9bf01f60127def8a5d55480fceda0eca7b47cee2a43f83902d328" name="librgw-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="025ba141a02d768ca313d86ebff4d14c78a46775db6cb409c50fda208201fa84" name="librgw-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0fa8be49fe048ca67429b0d597756ebcb266633baf883e363650bb60ccd00f78" name="librgw-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="491a1ddfb05909a8813d71d8b4552e4864aefa012702632be075af7c4d4e8a02" name="librgw-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9b94437f85c712b9ae7cb5ef1ccd8e11d60e03a560dde826afe37975c0b2d350" name="librgw2" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b512f9a583d772ab5e6ab8c98a29f4c2b6c9fcbb0d1147212c23c0c78f1802d6" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="afb305a54ffa88cf9c0fb9ca72d5792f481d74bbb4687dac5ec84504ddf0a917" name="librgw2" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ef8a0574b2c7c8f58dda5fde8ccd1e380f7fdf3f58b62a369a1252aa585cb186" name="librgw2" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc985e2ea92a9a6f702aa3d55fcf12bac3d2d0d7c47305afbf3ed8f3b1719ead" name="librgw2" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="eda4f82b081a4081be861cc7c61f4b2b6a4d3710112046933c0a89c5d14f2c9b" name="librgw2" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d5670ae1d6c69c159db755c5e5101825a26fc80efb5a2e495425b71710121bfa" name="librgw2" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ff0e4096cfa42c92b14e5fbf4b1a97f8d7dd49cb98d1b2d8a9db6bbdf772d223" name="librgw2" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7c4d8bd6ad857cbe8f1402c1ba41f0b5554786859eddde07f420d6231fc4859d" name="libslurm32" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cb14cd9a64b73ec187a6f07a73296391888c853da03033fef956c0a88d1e7db9" name="libslurm32" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="edad95a32cb5fc565366a45804d0b0f370e7f074f95c67a4b0b4f5abdc86000f" name="libslurm32" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d7c49489e4a03d63dd5ace1af10d6a3adaa978f105a03874f35c324de7d5509d" name="libslurm32" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f78e8bbe26a0b08c90ed83e277a5559c885adfaaed493d5f196750effb929632" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="eb91d4ea09e3baaf409b86e2162db0d2add872c2df96920701748e35cac651cb" name="libslurm33" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7e89b3258db393d27a0ede22867efa3026a8bfafaaa0f1de04f126e5415392a2" name="libslurm33" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="192275b170b627011d35376d806c603e8b29ea637865f0e9fe6e21fa716697ef" name="libslurm33" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a4f8ebb0bc42fd42b51e0d5399de392e60cd1318875057f2d1663a9027c89bdd" name="libslurm33" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="06fc4150da603ea5e7f01642372ce2924f8c57fe987073e0a92e57d8eda518b9" name="libslurm33" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0ee901970f138705077a7c021ba933d99689e78f059ad4601ece740d79864e0c" name="libslurm33" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9e846692f9bd6ce43e92bbea8dfb78c4be6806cd47fe649e2b904c90ef27750f" name="libslurm33" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c2581ed64d08b07306b89611823bef0e81aba97befdeaa821fd458f1d44a0487" name="libslurm33" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9355984e2baf9409a3ebe21629e0386a785d3590de9fba9776969e13e56d0403" name="libslurm33" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a1d85b9c2f15b83d1a93298748ee53201eeca3c027f328708b0e0c01c349408f" name="libslurm33" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0a0e25fff0a89f682e3b4dbfea0f0e4e15b45e8bc3971d2d1249aaab8ba8fce1" name="libslurm35" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="758d7d46a3d0f05010b8b693cb62e7a8cdcfe4eb44f9fa4148d99c022977e030" name="libslurm35" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fc3135d15571a3b5088af0112772ad4e9ee9c560de0eee325b05ae6655b3bb9d" name="libslurm35" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5bf26bc084a5922430bad75481965f9afb60d7cab8dc94b2bfa7b302694b5a43" name="libslurm35" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7126792cc4b50a69221d8275ae72da8867604b56c13df03ed3acf0b922b897bc" name="libslurm35" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5837beaa3618e7f5b8228867344dc8538ea89bdf68865fa60d96aece33a0b547" name="libslurm35" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="96fcfef1eadfffa749613125d1f9efec755a0458c8111ad9118297eb583d3ef5" name="libslurm35" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d2b468a454edda2be5d181df7c057072965fa80addb6db1c2dac197a6ce95e2e" name="libslurm35" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="65d38c9353184b2e9fb02872f4142c90fcfdd02f82b43cc91b30d8b66475bfc7" name="libslurm36" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="be58858de4385887e5bf35826c722e01e0e3694ad263501aa721d613de1b5b20" name="libslurm36" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="36e2f6d284b8261995cb7d9025324c67ca1c8725e642b0dcda8ae24cc2ddca8d" name="libslurm36" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e59a8b9c32b26265cfb5ed72e1548b3b20202f47be48293c7a94ff9696e09e69" name="libslurm36" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1e450b3a1abd9eb1afe0321c9f08563343ae6b10bb7981577636b8ab46342db9" name="libslurm36" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c57786c90a276784818c161fc0354fd717db20868bde755fecd3010a3482f6b6" name="libslurm36" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="687030cccc5053b5a1b1e99ba478cf3c330888041291e73260aafe4bb91c5670" name="libslurm36" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="b39d84ad3f43b69f2002bcdb4861a8e852264668b765bc255d45bb0ff175159d" name="libslurm36" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f853b896ccb1deec21b0a321474172258240474be6846ebd5432ec66d0e25071" name="libsnappy1" arch="aarch64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="480fc37ee8ace3ec10c5480377d978fbfa9a6b032bf9c834714755b060eb29be" name="libsnappy1" arch="i586">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="5451465f5bea0e6ee14dfc887fba490ea7e6a0c20b80e1cca7eb10c222c22472" name="libsnappy1" arch="ppc64le">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="771a20beb491d1a6d338ebe1c4bae3762d871625e23183c54d0642ddaf3595f1" name="libsnappy1" arch="s390x">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="302408ddea335b038dd9f19eedac9881699e6c720d2a329d597450cee1e08c1c" name="libsnappy1" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="ed44b262cc8f18353c4481791725801bc44673a2d8d0e6671fd98fe78ca5659c" name="libsnappy1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="2eb83f1578702c346dce77191a14de7f81d9c07f996b700dbda144165b8a81f4" name="libsnappy1-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="dd2293ef2372646d1ae30afb70918b22b354264941f4e7495b899f1ea1924cb2" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a1c75b91500dfdc1bb75545944b95e0f5c3c74919f08d818e73113630ffabccb" name="libsoftokn3" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="40e297b326a15a4b42bcd753a32fdf928a8afb8d942f966e9d5315b9eca2a941" name="libsoftokn3" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="79daeb565222001b47b41db4a0a8c9cc07118658f235953b246915929cb92be2" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="01eaa6ed0e9f079295c99a37c7f94f7aebd536f5320b75bc7d75449acfb3a91e" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2235566483faf658aa53c2a70829a324ab81f625408a4c8f98523610e6acb412" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="fba0ef7b1f091017955c3a6ff2933a60a7f00e69c86e3b8289ceb7e78609d79f" name="libsoftokn3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="991811ca81ee7027f229e9caedb32c3b66d17c6d399a69a8ede7d1469438d251" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ccb27680ff537621fc282e3b969049a6aa40dae63d71e0bd30f322ef7803962f" name="libsoftokn3-hmac" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="347ea319adf6724738d4b26958d0b7cb8a75a4de6797da0e2c47335065df072f" name="libsoftokn3-hmac" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="37bb4211c9975ed20ecb94c242fdacc29d9ffe962c6787548caf40cca721c52a" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="61d2dd09ae513b211651dbc6f829e6f1112b13593df6a998e75d91d5b043792d" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ba01a80b7d65505b111219bc5d630c21ec5cd570aff535d499e5f1b2e557cf54" name="libsoftokn3-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="d2c13909b5d7a82440c574e7dbe09c7bb09f2e45b39217d73bb04801ed7f203a" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="565f0ff3583330a9db4de8f2c62cf0a831ce3a7fa2e085211a8a3c176ee8833f" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a2493b64240cd5077db1f3a6e196174978252440e4cb78aaf4a5a1eb10607f61" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="1de2e9158dd397d9f5777dff875de106175a0f5f0a8f3bacd68e8984329631a0" name="libsolv-demo" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="043b18a03b92cfaa67d05c9f730327b13d9dd41010ea971cc21a4b8da50c7153" name="libsolv-demo" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="e52c864e3eabe4ce454663fd4361313d77d9659be0992fcdf60fc8c0a26ab236" name="libsolv-demo" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="17afd4da89d64bf7a1401d44069dfd465a60fdec86d13456fe763a9496a6e79c" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="61ff5e9c44e359782ab35cb38fcc2bd0c7aaaedadf9a7aa925d2bbba6823391a" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="c7a741c5e33906b5cb5535ce4bd05252986361599705577c5977c21a7e92ded8" name="libsolv-demo" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="c8293683e008f24ec2e0932639e7b7589aabf45c81fc81ca321cbab5a9ed2b09" name="libsolv-demo" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a36a871500c31e527efb84cb26fd12922012bf26e38d6d83fae5218081037551" name="libsolv-demo" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="d5d62d12c9422df761f5f52d4d5e0a9e8078cc6b6c3c245d06ba3ce407579203" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="9e1f7817b805f30df993c6849ea2adfe33396ae1cb1eda935d4e3b90139c9c56" name="libsolv-devel" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6b83af8aca17f78c474c7c16e7eed909868408d89a2de24615e2fc8d0604ce72" name="libsolv-devel" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="97053213d850d23371142edabf1580a7fc40bc20510602904191d507378054d0" name="libsolv-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="dfff0da5b85680f1f8c2c061c0c72cce791d407537276746bf2b5a918a32f845" name="libsolv-devel" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6214356a07e31a6aaff3366e1555dda9722ee4086c4ab4c52aae053b4aff0186" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4fba949980adab0abefc5664f25b7a679736146bfa87519d5982255b00ced585" name="libsolv-devel" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="b82b52631f3cb2fca85fba0abef9fb61f51c81184fd87831d7770bafaab5e585" name="libsolv-devel" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6901ee571a7ab66916de00ea4a162cf071a4c03f796ddc291970328124a4340f" name="libsolv-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="8da25acf74f2cc436bb7dabd93c415b2e8f573a6758fdb0f510a66530fe2aa50" name="libsolv-devel" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="20007c131e1ac63d86041fe5546a9500e7f44a18672d74f70b53125a703c7560" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="cb6d2be8eb0dfe2c76d26071e67f724933bdf7a81a439ede54eb757d76015b54" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="8b97be54294c3b318aa1e9b2713d8a0f90df496f0c553cb1041bd4bc94b1a120" name="libsolv-tools" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="70947afc886cafc4bc7e31580cf1c616e6afa7d9d8812c222141c4e358805482" name="libsolv-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="bec34ebf6dc6ccdd22c97430caf4718a5e29855cd951c7e4e0704f051afd37bc" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="84dfa6e4ac7d535f05faf804c1a1fb24da24685ea305451c96ebeac8a43968b5" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="612a6d4da39ba240035ccc79412a347938abe8faac7aa7658f106925a33968ac" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="b08bc79cfa80006b48e4dee76d02fee6ae8224a0bf7aa50bf014877113d5e95e" name="libsolv-tools" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6137bd78950c25092d8c6763451327742cc169a1d85877afad0a91e26db8b4ff" name="libsolv-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="0cf09954565168f595e0fa388638370a4136315cef88fe15e15c4677c5d9328c" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="adf99cc08f821289ed095f0f7442261ab71e9c44afec3534dd83988f181434e5" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4143662e0dc0f3fe92183427dd564ae39eff2f2cec0f73557db5628a664e943e" name="libspice-client-glib-2_0-8" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="9b6f53384c56de2a3b72fec83267222e2309ef0b7c74f2cf2e1621d8f066b8d8" name="libspice-client-glib-2_0-8" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="df3a4790829cef674585a263129369e4c75bd705a4d5f2853f088d94ab7e0b89" name="libspice-client-glib-2_0-8" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="446006631996e3103e85b38cfa4abe1f482936254a393714c3eff19826e78304" name="libspice-client-glib-2_0-8" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="2877572c900dece46ed200c47f9d6bed6bca1decff6c70ecb3f7c10ff9e0b470" name="libspice-client-glib-2_0-8" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="e7095bc6529928f8cf19b8770eb4160d383b5887f64fb4667ddfa3b46b5c398a" name="libspice-client-glib-2_0-8" arch="aarch64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="f9e898bc800eea3cb641f3d1818ffb1932d974b46a43280d79d236fd62e0942f" name="libspice-client-glib-2_0-8" arch="i586">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="ba71d8fbd23cb20a8f11f727b6f5ee3756c2c29b41add351077ffbebce0d1a74" name="libspice-client-glib-2_0-8" arch="ppc64le">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="e92219cd0ead893b092a3907611e10adcda7f49e35099f1db54438c7c8e750d4" name="libspice-client-glib-2_0-8" arch="s390x">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="dc5369e99ace9461036246fba735721c2c122d9a81d8b9c6e5a16a82ced9aaa4" name="libspice-client-glib-2_0-8" arch="x86_64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6e93724654ed240cf1031aa9c2d9ad86d7bcfd4c69785ddce0764dce3569351b" name="libspice-client-glib-helper" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6dbc5061e7542a1dd6f108f555138cf3b07cbfa4aa5b050e1b68f7523e2909e7" name="libspice-client-glib-helper" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="246d000c65e27fdf4db6a27c4d7f1c23f51f76df01534c3ed2cdd0e369e211f6" name="libspice-client-glib-helper" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="05d953a68ec03e208e2e83ed1b23e578ef57e2e58434dffa1ffeb0a8303c8d22" name="libspice-client-glib-helper" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6137bc4cad27920329856a9ba79b867a5e43d59117d410a319fa1671afa856ad" name="libspice-client-glib-helper" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="30c44d50644a0e6112f92629c920006559163df1199ed8e410b781ffa9c3868d" name="libspice-client-glib-helper" arch="aarch64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="c4761420cbc3d9e68967255b42f0470a5d16aacb511ef685e618d8073616e50c" name="libspice-client-glib-helper" arch="i586">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="dc9d190e8ec7ffccbb141f2fd916d651abcab7d5fba9c84298d6efeed76ec66b" name="libspice-client-glib-helper" arch="ppc64le">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="570f9d9c4b7edcd657d4172babefeb0b1123fac3e1dc60afe308f377db7a7678" name="libspice-client-glib-helper" arch="s390x">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="df501f7072f27e54afd78f6fb9e7e0ee9a579259b29a69eee5e880fd5261d2f6" name="libspice-client-glib-helper" arch="x86_64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="e3943efe48b8f153f43d9fe8ac56dbf77cae3fd824316d695e46f50415455ecd" name="libspice-client-gtk-3_0-5" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="d8d6f25076815db5b26f08d701cbde115f689394f18ca06c1971886452fbc8e7" name="libspice-client-gtk-3_0-5" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="841b04ab01770889c88c41a69054100ef5c605d15434a619d50477c33e396113" name="libspice-client-gtk-3_0-5" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="25d1492cc807f3574f2c5b934be68115a232f84636fe4d39e743fd3007c7721a" name="libspice-client-gtk-3_0-5" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="78a66beeb3620bf81204b6981c645f71b7a26aa944f721d2261af360b49de1b1" name="libspice-client-gtk-3_0-5" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6cbd21a5bb9c69b86f1378b2b25a8fb2297c79f9a2f016044cee5226c41578de" name="libspice-client-gtk-3_0-5" arch="aarch64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="b74195ed58b47abca326a3f17193d0c6fd00c0c991d2f027ac3c3b93735524c6" name="libspice-client-gtk-3_0-5" arch="i586">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="96ebb295b05eb77471006e0e85241c9917ec4b3ca2a97c2aed85ade315082735" name="libspice-client-gtk-3_0-5" arch="ppc64le">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="fa3cfadf4c0c60f96f6dd4e835813872f170ff3b26b154db43ea88e87154dfdd" name="libspice-client-gtk-3_0-5" arch="s390x">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="469296c37e5429a01dea2c29933b2149512e70109a42cc34e6ea999ca55cbcff" name="libspice-client-gtk-3_0-5" arch="x86_64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="025991c6446de54c29dc1fe3245a5eaff518eca06813ba7815d2f663ff525a8f" name="libspice-controller0" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="9fc9c0a4648dce0bad754512b3642d8d4c4053bd89a2bdfe6e576529b7b60d9d" name="libspice-controller0" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="032caf9c12512155b5abd583d16097a26565fabba344ae765fce20b245f9bb55" name="libspice-controller0" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="087300695304f4cd17d34d56868fa063e0ab2cfe19d662eefa44e908c1ecbb41" name="libspice-controller0" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="928d42dbd700672a7fd0d2204635c9a622a5616351c593e2efea9e38dfd755da" name="libspice-controller0" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="5e90e6f6f5fcb9119c78715faa83117f87a189dbd5e6ccaca65ef8b9a75ee8ea" name="libspice-server-devel" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="1b3e1a09e7d2d8668215d8835c9005016a86b3b2e0781a7412c4371f11fe233e" name="libspice-server-devel" arch="i586">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="ddf0e58280fdb2c467506f689c51e7fadf0e9fe101a267a27f46dc3d3fde0c78" name="libspice-server-devel" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="62f97913001e2ae4ffad5d3ec40ede24bd7f3d3af0388d5bd2ad40ee9179f0ce" name="libspice-server-devel" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="e1f05a40a62e13ab6d4035a1a7e150b116dce5f103506c2ce068d812d5b45185" name="libspice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="ba1916293756fecfb936a1dc153ed36fb0b0b54ad4f47e39e9a609344a831acd" name="libspice-server-devel" arch="aarch64">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="4a4a7a2fdf6488d625cd23f82a62a4928ca97e23bda63d250846417b8edc2351" name="libspice-server-devel" arch="i586">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="eaa972ed09b4805ba9d438a1cae977f2f6e612aa8750e05c1a2d0f6969eed927" name="libspice-server-devel" arch="ppc64le">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="67a986b53a44e8a08354d891c6bae27108688cbbdc52dedddb3f362fff238557" name="libspice-server-devel" arch="s390x">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="88d6d0ff8e0384f5fadaded9dabc84085773d0c9c95e1ab0614f10ca6cecd490" name="libspice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="24bbc1552228b1b11a7f8aadb064621f6ffd235a0881056f4e56a14c5bdd9c82" name="libspice-server-devel" arch="aarch64">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="8538dd39f569952c7e18c221168059ca16ed0b6c82033efbfc3e9e1005e702c6" name="libspice-server-devel" arch="i586">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="0ed5560a576c5de20091942de04a3bd519624df76f40b56f11fd1e7665f7326d" name="libspice-server-devel" arch="ppc64le">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="d0828adb201f3f5f7ef954951bd2f93dea1d692025c5e6ad6de5947d1c09d52e" name="libspice-server-devel" arch="s390x">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="3b78a071b299ada8778d11b4b3b27628e1b4fc2e92125b06029cd59b48bc8189" name="libspice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="237e4ca710a502592aeba31e212219f8f22debe42bb4f48c25cde563db78a858" name="libspice-server1" arch="aarch64">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="60c905f8711a8b6f8d7da71cbd1cbdaf6377278228aeaa5cdd34330c8f8d3111" name="libspice-server1" arch="i586">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="c4048a1bfb8beb0a5fb28cfedb64e80008ca9722a03db798224064484cb3003d" name="libspice-server1" arch="ppc64le">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="2fa4e23cb64406b5af4e61d72ef0de55677f170dff007e8e53f3188493c873c7" name="libspice-server1" arch="s390x">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="08aa9ff85ec0d8e4f11980e16b4bfb6c58d2212a45bcdefc80e8ef701c745fe3" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="13a078ecef7a6e0f3409f8195232f3b3087e99ce32208349c67d43bc781836d6" name="libspice-server1" arch="aarch64">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="bcbca51d87dd8a75049de05ec78949c7a95677e4fe328b802d6acc115817c701" name="libspice-server1" arch="i586">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="72c7e8d7df7f792158353f01072a475a2dad4712d8acb1852998c7f438ff8faa" name="libspice-server1" arch="ppc64le">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="fca2315c287abd544e4e834e92648232956a666844d49ff60c176efe4086b098" name="libspice-server1" arch="s390x">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="6a9510ea5ac62ec571fbbe6591f54b386cdca09ceabc320b149dd947b435a5ca" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="bced7afc3a5edf826015a31e202b3306022182abcc7faeba0f8e489853bdf5a4" name="libspice-server1" arch="aarch64">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="52372aa38b662bae45e2ff95049f5c1d408d987182caf8fc0036d5981f46969c" name="libspice-server1" arch="i586">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="d5c648b30072f40cfa4744983071388305eff3d2552edb4dd6268ad23734b6bd" name="libspice-server1" arch="ppc64le">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="56c76a027e759a1d98fe035fabf76165a7547ce95cabc62709038663f827bb56" name="libspice-server1" arch="s390x">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="e9bffb7da7aa82c9078b2dbcbfba175499a1ca329b6e9d08a657358274cc8dea" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="d2e400b8c9487aada9160e61b4bc744167530775614dd9a6e0cebf09592c7540" name="libstdc++-devel-32bit" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="d57478f4f5da937b6f646c3da684198c5ea065283abb5537a6a374ead7fbd679" name="libstdc++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="30544278485f7dbf5955fc121ed1fb3e7b26c9be49d107bf82527af075599340" name="libstdc++-devel" arch="aarch64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="f5f80c355c233cfada203447949ede48238452d0e78a05a7c689dc8f6ebafd58" name="libstdc++-devel" arch="i586">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="8fd7b7a4329caf535ae81b589bbce5d5a01802574dfda96f7b2bf80681e3e88e" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="58bc8cd03f3a8bd8f1db88b556ba06edbd91f299a708aba51879e1c710072eeb" name="libstdc++-devel" arch="s390x">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="303eefdb04e21556acaa74314f9875eedec7bb82f16e7d585af503d54e8b005f" name="libstdc++-devel" arch="x86_64">
  <version epoch="0" ver="7" rel="3.6.1"/>
  <changelog author="rguenther@suse.com" date="1485172800">- Remove java related packages, those are in a separate gcc-java now.</changelog>
  <changelog author="rguenther@suse.com" date="1486728000">- Enable Ada for s390x.</changelog>
  <changelog author="rguenther@suse.com" date="1490270400">- Switch gcc to default 7.
- Remove unrelated README.packaging.</changelog>
  <changelog author="rguenther@suse.com" date="1491307200">- Fix dependencies of libstdc++-devel-{32,64}-bit.</changelog>
  <changelog author="rguenther@suse.com" date="1492084800">- Remove README in empty packages only required for SLE11 and older.
- Remove now empty %build section.</changelog>
  <changelog author="mliska@suse.cz" date="1496750400">- Include gcov-tool and gcov-dump binaries.</changelog>
  <changelog author="rguenther@suse.com" date="1496836800">- Guard gcc-devel so it is only built on Tumbleweed.
- Remove bogus link to versioned g++.info file which doesn't exist.
  Instead refer to gcc.info from the g++ info directory entry.
  [bnc#922419]</changelog>
  <changelog author="rguenther@suse.com" date="1497009600">- Fix gcc-devel guard to use %sle_version.  [bnc#1043590]</changelog>
  <changelog author="rguenther@suse.com" date="1528200000">- Fix gcc-PIE spec to properly honor -no-pie at link time.
  [bnc#1096008]</changelog>
  <changelog author="rguenther@suse.com" date="1528891200">- Add gccgo symlink, add go and gofmt as alternatives to support
  parallel install of golang.  [bnc#1096677]</changelog>
</package>
<package pkgid="65838a2e07a8f7f4b41517d31868828a92766b1d5605d5edf4b43bfb6cd2b7b2" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="bd496cc13fc7573c69bff9238406077739bbe291c85380b980113abb4267406e" name="libstdc++6" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="7ddfba73109a6a93ceb1fcaa923c6d5306c9eabc28f32eb1f2c0669fd4aa9107" name="libstdc++6" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5d5487d85e0f580339840b993e5e956df8f74f7431d18c8deafd3af46511f342" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5b2739edeeb0b47bbd8c1053ee3f84f42dec7af9a5f78786652df16a8591eafb" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="cbf6ba982505bcd7d48a7ada9e49b8b83f57e1e99f55386a8932bdb859f6bff0" name="libstdc++6-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="778b06405fca49f53c944f45c26d8ca2fe26c2fe648263728f0e8f660c0eaa6d" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="89147c5ab9e841663e7a6c1298b30aae134bfd6b20f33d95f89adbf0c85c5867" name="libstdc++6-devel-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="af304fa110dd35b8eeebf6b3943fc7139557e9a272eb1c9adabbe6b04194bc1b" name="libstdc++6-devel-gcc10" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="35a5ef54060e9db27329f1febb492e2d0b778c3bef92b179b55c3518dbfce1d3" name="libstdc++6-devel-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e9851cc3efbed0ed072954e66e5bcb869e49053b7a5cbb8af97d06ab9977da54" name="libstdc++6-devel-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e97d94a5fa3b37f8b1ccbd512153ca7504594bb249f3890e4ba598f899368e4d" name="libstdc++6-devel-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c697db947ddd0a628df08ec17c14bed6880c9d15d7c168c5681012af946de89b" name="libstdc++6-devel-gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="232f8c60b91c04afb9b7f38f3002367919de8f7f906096baa51e281038f6aee0" name="libstdc++6-devel-gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f82615849a1f5d611ad098beefd5b47402c7e984753d208c43c61421a0da56e5" name="libstdc++6-locale" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="3b727d5171b34a92d3a0a70c888a1476990f31bd64899c56ee1d7a409d43c68e" name="libstdc++6-locale" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="11460972fd7d296d6b0f258cffa8c8a314e93ab7ef43614a82916eb29cda0a47" name="libstdc++6-locale" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="aa27362da721853326988ee7f80409eea95207c90a7d0fce15545d2f6d79b0db" name="libstdc++6-locale" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="62a70081e712f0377b0fbdfc5eb5263ce0eabc53ce1e7b9379427d8e037b1ece" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="195f18ee5cbf3924bebfae0626b9d1d9b7958a9f2f0c06f64882bb3536c5a703" name="libstdc++6-pp-gcc10" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="05a894c9af2720282fa2a2fdfd47883a6e24b4f5322edfc0c72b44b299d376d5" name="libstdc++6-pp-gcc10" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="4f201070dd732343a099729973d817df98824e1f19d62508d250d7810f825bb1" name="libstdc++6-pp-gcc10" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ac2c1284061ba418454168dc7a4d1956ab3a89c2fafcc58ac70acdd1514d1478" name="libstdc++6-pp-gcc10" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="f54f917d6dc011f5179138bf077e690c0951402de4dd3d6a80552f72f0a1ca20" name="libstdc++6-pp-gcc10" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="aefcbcb11ece9f3faebc960ce6da0beb66690660d71331344c9c79d469c865b3" name="libstdc++6-pp-gcc10-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="2f01dd39d38a5f4a2f707842464acd1085dae629757f2321bae841875c46d7f1" name="libstdc++6-pp-gcc10-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="c4adabae2384a6f4703da5bc51c982f56da447256107285d23e522795ad31d20" name="libstoragemgmt" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5ca8839292f24ad9d7e2371f9687f58183a8ac6ca1f976e52d42895376f6b043" name="libstoragemgmt" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="55c3e46ed7ba08869d0fb2ce87e1776c34dc86b8fe0adea7c973c7dc98c7797e" name="libstoragemgmt" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="40e43bd38754bd122ff8c6c57fc8f9487749cd7b2a44baf6aa2d0f020198056d" name="libstoragemgmt" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="50bb4519a429f2bac96b5f2ecb64d7ecc0ffbf76b643017ce80181e78aaa07f7" name="libstoragemgmt" arch="src">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="55f54d41861a7e6f0e32e12cd8379b66c6c2307760414077011444ec1dd492c9" name="libstoragemgmt" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ae8b413a3fc11c8fe5eff36c4c345e1283f55102bcd80b41da3d9a0f363afabe" name="libstoragemgmt-arcconf-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="7c952703cbdc84e155583758b57fb272a0f91fca8c4ba57dd221cb4226f579a4" name="libstoragemgmt-devel" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="df60abe71084c8eeaa63cc1804265e2273b39f62bda1d7990f95b72a8ed9513d" name="libstoragemgmt-devel" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="acb833533bd73ac8f9e93081148c74f8a9c9bf401e37fa2b4b52d13fd8d88962" name="libstoragemgmt-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="e5ceb0bbac3aea0c3fc936916d4c4ca76f0f4bdfa54a32992e616bfc39539bbe" name="libstoragemgmt-devel" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="9db3067af093c0dc2e60711a0d51b92d5c4dcd2a5cd76180f9f940d545af4637" name="libstoragemgmt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="18cd4205d3bf223ce5018dbe61db823ed8fe7ad002d8f9603f76c7f554f79ca0" name="libstoragemgmt-hpsa-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="214258ee42ab93cab3aa4b1c2b0798c247d714e8e9d403f7d28234495f5e4bb5" name="libstoragemgmt-local-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4cab331de96dffa494d86b300676c2db18399d461bbca7dfe285f98efb201424" name="libstoragemgmt-megaraid-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="1763df7e7bf3becbbe7af4a9241b30dd31e22c8ade3e601eda2e0c21b33fe75b" name="libstoragemgmt-netapp-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5284c59dbce580f08a6cb4fb8ba6706c2857601b9756bf03de66ce926e7a8c43" name="libstoragemgmt-nfs-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="47cf3e32811d89c09fe21139008bc279536a74a5087383d0b45b08e8b3368d33" name="libstoragemgmt-nfs-plugin-clibs" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="400187a6e12fe0ff7655fd371065952072ff4ed6c199f9d34a78c45016d88bac" name="libstoragemgmt-nfs-plugin-clibs" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="f6c73ec1b0125b21340bc209e34501971dc0d67b28ef6e420c31871fdd0f434e" name="libstoragemgmt-nfs-plugin-clibs" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="f47ad3618e25e784e5c4a205583bc83996438d365a33bd2bc942a2f335d30bab" name="libstoragemgmt-nfs-plugin-clibs" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="39649e0390fa65fd098e43fb9e1ae29060a95fa8cf4d790d021aee7adcb6cc58" name="libstoragemgmt-nfs-plugin-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5ac0902dfb1a6fcc04184d27516fb360fdfdf68324d4e3065b5387e16974caf4" name="libstoragemgmt-nstor-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="78e0756d94a1b3309fc2677618cb33f2df5125fb7d34be4f404c74b69fd771e4" name="libstoragemgmt-smis-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4884605b9705aedc48f55b50564d7f7866e504e791f424e1cf73864522105a27" name="libstoragemgmt-targetd-plugin" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="2181f15866af08e99f415149027086c4b5ec592d54a4936d0ccbc3979ecb15c7" name="libstoragemgmt-udev" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="19fff444cce7704e88d4a564af944afd5f0bcee803b22ffc3404595872e755b7" name="libstoragemgmt-udev" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="0f573e068b6a72d831a22b14b7441858df1610cfa652f84b81c96a35dcea357a" name="libstoragemgmt-udev" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="c44965331d0ef8abc0cb907c83d3ce25d8af80dab1747bfcffa3f4cd4268b389" name="libstoragemgmt-udev" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="4edd5324701b52ff6a23bc3b0f4abe0b04372284827546f860284f35f0a6964b" name="libstoragemgmt-udev" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ecc22c73548f3ec309902e418d1ea8edc7247421019b65b156f35e38225f4229" name="libstoragemgmt1" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="b0d81935e1623c348fcb73307439b0d2d51a4c6b20f76fb07c7d420aa5317993" name="libstoragemgmt1" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="7b3b8aa78cf15d8e441f5d6dbe712460a06cf1d74710fbe3974b8350892e1f09" name="libstoragemgmt1" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="35fbb9db91beb16fffe99a0b7af26258bf868ffca9a2b0f42973f90990f7d75a" name="libstoragemgmt1" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="ba9f1b905034b176aa821ee291a9be35fb186f7134cf49803a25ffb68bba43d8" name="libstoragemgmt1" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="b4a461cd7358d7bb3a6522c1bfd2d3a35bc2319e4751ebf382aeebf94d40cafa" name="libsvrcore0" arch="aarch64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="377ede24c725b765dbcbc8c3651756f27c390a06e07d2f1939161ff4e521417e" name="libsvrcore0" arch="ppc64le">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="46992b713cf0157c5e32b54abc74986122b11ee4e4dc4b26918f8a613c61185b" name="libsvrcore0" arch="s390x">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="da5c970f9811d209d0982174cec9f9b78c271c3ac851c0f57efa34f0211100f0" name="libsvrcore0" arch="x86_64">
  <version epoch="0" ver="1.4.3.23~git0.f53d0132b" rel="3.15.1"/>
  <changelog author="389-ds-maintainer@suse.de" date="1581940800">- Update to version 1.4.2.8~git0.3aaa3e820:
  * Bump version to 1.4.2.8
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors</changelog>
  <changelog author="389-ds-maintainer@suse.de" date="1586260800">- Patch rollup as described in bsc#1169364
- Add rust vendor.tar.gz as a source - rust is still an optional build
  and will be enabled in the future.
- Update ns-slapd ownership to remove dirsrv as an owner as dirsrv will
  not exist in containers with systemd users.
- Add 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch to
  resolve a warning found in static analysis in OBS (upstream #51014)
- Update to version 1.4.2.11~git0.aff1a2831:
  * Bump version to 1.4.2.11
  * Issue 50994 - Fix latest UI bugs found by QE
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50744 - -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Bump version to 1.4.2.10
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Bump version to 1.4.2.9
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue 50499 - Fix npm audit issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Ticket 50618 - support cgroupv2
  * Ticket 50898 - ldclt core dumped when run with -e genldif option</changelog>
  <changelog author="william.brown@suse.com" date="1591012800">- Remove 0001-Ticket-51014-slapi_pal.c-possible-static-buffer-over.patch
  as it is part of 1.4.2.14
- Update to version 1.4.2.14~git0.5ac5b02ce:
  * Bump version to 1.4.2.14
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Issue 50940 - Permissions of some shipped directories may change over time
  * Bump version to 1.4.2.13
  * Ticket 50787 - fix implementation of attr unique
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.2.12
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50545 - the check for the ds version for the backend config was broken
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value</changelog>
  <changelog author="william.brown@suse.com" date="1591012801">- Update to version 1.4.3.9~git0.3eb8617f6:
  * Bump version to 1.4.3.9
  * Issue 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51113 - Allow using uid for replication manager entry
  * Issue 51095 - abort operation if CSN can not be generated
  * Issue 51110 - Fix ASAN ODR warnings
  * Issue 51102 - RFE - ds-replcheck - make online timeout configurable
  * Issue 51076 - remove unnecessary slapi entry dups
  * Issue 51086 - Improve dscreate instance name validation
  * Ticket 50989 - ignore pid when it is ourself in protect_db
  * Issue 50499 - Fix some npm audit issues
  * Issue 51091 - healthcheck json report fails when mapping tree is deleted
  * Ticket 51079 - container pid start and stop issues
  * Issue 50610 - Fix return code when it's nothing to free
  * Ticket 51082 - abort when a empty valueset is freed
  * Issue 50610 - memory leaks in dbscan and changelog encryption
  * Issue 51076 - prevent unnecessarily duplication of the target entry
  * Bump version to 1.4.3.8
  * Issue 51078 - Add nsslapd-enable-upgrade-hash to the schema
  * Issue 51054 - Revise ACI target syntax checking
  * Ticket 51068 - deadlock when updating the schema
  * Issue 51060 - unable to set sslVersionMin to TLS1.0
  * Issue 51064 - Unable to install server where IPv6 is disabled
  * Issue 51051 - CLI fix consistency issues with confirmations
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51054 - AddressSanitizer: heap-buffer-overflow in ldap_utf8prev
  * Issue 51047 - React deprecating ComponentWillMount
  * Issue 50499 - fix npm audit issues
  * Issue 50545 - Port dbgen.pl to dsctl
  * Bump version to 1.4.3.7
  * Ticket 51024 - syncrepl_entry callback does not contain attributes added by postoperation plugins
  * Ticket 51035 - Heavy StartTLS connection load can randomly fail with err=1
  * Issue 49731 - undo db_home_dir under /dev/shm/dirsrv for now
  * Issue 51031 UI - transition between two instances needs improvement
  * Bump version to 1.4.3.6
  * Issue 50933 - 10rfc2307compat.ldif is not ready to set used by default
  * Ticket 50931 - RFE AD filter rewriter for ObjectCategory
  * Issue 51016 - Fix memory leaks in changelog5_init and perfctrs_init
  * Ticket 50980 - RFE extend usability for slapi_compute_add_search_rewriter and slapi_compute_add_evaluator
  * Ticket 51008 - dbhome in containers
  * Issue 50875 - Refactor passwordUserAttributes's and passwordBadWords's code
  * Ticket 51014 - slapi_pal.c possible static buffer overflow
  * Issue 50545 - remove dbmon "incr" option from arg parser
  * Issue 50545 - Port dbmon.sh to dsconf
  * Issue 51005 - AttributeUniqueness plugin's DN parameter should not have a default value
  * Issue 49731 - Fix additional issues with setting db home directory by default
  * Issue 50337 - Replace exec() with setattr()
  * Ticket 50905 - intermittent SSL hang with rhds
  * Issue 50952 - SSCA lacks basicConstraint:CA
  * Issue 50640 - Database links: get_monitor() takes 1 positional argument but 2 were given
  * Issue 50869 - Setting nsslapd-allowed-sasl-mechanisms truncates the value
  * Bump version to 1.4.3.5
  * Issue 50994 - Fix latest UI bugs found by QE
  * Ticket 50933 - rfc2307compat.ldif
  * Issue 50337 - Replace exec() with setattr()
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 49731 - dscreate fails in silent mode because of db_home_dir
  * Issue 50975 - Revise UI branding with new minimized build
  * Issue 49437 - Fix memory leak with indirect COS
  * Issue 49731 - Do not add db_home_dir to template-dse.ldif
  * Issue 49731 - set and use db_home_directory by default
  * Ticket 50971 - fix BSD_SOURCE
  * -n option of dbverify does not work
  * Issue 50952- SSCA lacks basicConstraint:CA
  * Issue 50976 - Clean up Web UI source directory from unused files
  * Issue 50955 - Fix memory leaks in chaining plugin(part 2)
  * Issue 50966 - UI - Database indexes not using typeAhead correctly
  * Issue 50974 - UI - wrong title in "Delete Suffix" popup
  * Issue 50972 - Fix cockpit plugin build
  * Issue 49761 - Fix CI test suite issues
  * Issue 50971 - Support building on FreeBSD.
  * Issue 50960 - [RFE] Advance options in RHDS Disk Monitoring Framework
  * Issue 50800 - wildcards in rootdn-allow-ip attribute are not accepted
  * Issue 50963 - We should bundle *.min.js files of Console
  * Issue: 50860 - Port Password Policy test cases from TET to python3 Password grace limit section.
  * Issue: 50860 - Port Password Policy test cases from TET to python3 series of bugs Port final
  * Issue 50954 - buildnum.py - fix date formatting issue
  * Bump version to 1.4.3.4
  * Issue 50954 - Port buildnum.pl to python(part 2)
  * Issue 50955 - Fix memory leaks in chaining plugin
  * Issue 50954 - Port buildnum.pl to python
  * Ticket 50947 - change 00core.ldif objectClasses for openldap migration
  * Ticket: 50755 - setting nsslapd-db-home-directory is overriding db_directory
  * Issue 50937 - Update CLI for new backend split configuration
  * Issue: 50860 - Port Password Policy test cases from TET to python3 pwp.sh
  * Ticket 50945 - givenname alias of gn from openldap
  * Ticket 50935 - systemd override in lib389 for dscontainer
  * Issue 50499 - Fix npm audit issues
  * Issue 49761 - Fix CI test suite issues
  * Ticket 50618 - clean compiler warning and log level
  * Ticket 50889 - fix compiler issues
  * Issue 50884 -  Health check tool DSEldif check fails
  * Issue 50926 - Remove dual spinner and other UI fixes
  * Issue 50928 - Unable to create a suffix with countryName
  * Issue 50758 - Only Recommend bash-completion, not Require
  * Issue 50923 - Fix a test regression
  * Issue 50904 - Connect All React Components And Refactor the Main Navigation Tab Code
  * Issue 50920 - cl-dump exit code is 0 even if command fails with invalid arguments
  * Issue 50923 - Add test - dsctl fails to remove instances with dashes in the name
  * Issue 50919 - Backend delete fails using dsconf
  * Issue 50872 - dsconf can't create GSSAPI replication agreements
  * Issue 50912 - RFE - add password policy attribute pwdReset
  * Ticket 50914 - No error returned when adding an entry matching filters for a non existing automember group
  * Ticket 50889 - Extract pem files into a private namespace
  * Issue 50909 - nsDS5ReplicaId cant be set to the old value it had before
  * Issue: 50686 - Port fractional replication test cases from TET to python3 final
  * Issue 49845 - Remove pkgconfig check for libasan
  * Issue:50860 - Port Password Policy test cases from TET to python3 bug624080
  * Issue:50860 - Port Password Policy test cases from TET to python3 series of bugs
  * Ticket 50786 - connection table freelist
  * Ticket 50618 - support cgroupv2
  * Ticket 50900 - Fix cargo offline build
  * Ticket 50898 - ldclt core dumped when run with -e genldif option
  * Bump version to 1.4.3.3
  * Issue 50855 - remove unused file from UI
  * Issue 50855 - UI: Port Server Tab to React
  * Issue 49845 - README does not contain complete information on building
  * Issue: 50686 - Port fractional replication test cases from TET to python3 part 1
  * Ticket - 49623-cont cenotaph errors on modrdn operations
  * Issue 50882 - Fix healthcheck errors for instances that do not have TLS enabled
  * Issue 50886 - Typo in the replication debug message
  * Issue 50873 - Fix healthcheck and virtual attr check
  * Issue 50873 - Fix issues with healthcheck tool
  * Issue 50028 - Add a new CI test case
  * Issue 49946 - Add a new CI test case
  * Issue 50117 - Add a new CI test case
  * Ticket 50787 - fix implementation of attr unique
  * Ticket 50859 - support running only with ldaps socket
  * Issue 50823 - dsctl doesn't work with 'slapd-' in the instance name
  * Ticket 49624 cont - DB Deadlock on modrdn appears to corrupt database and entry cache
  * Issue 50867 - Fix minor buildsys issues
  * Issue 50737 - Allow building with rust online without vendoring
  * Ticket 50831 add cargo.lock to allow offline builds
  * Ticket 50694 - import PEM certs on startup
  * Ticket 50857 - Memory leak in ACI using IP subject
  * Issue 49761 - Fix CI test suite issues
  * Issue 50853 - Fix NULL pointer deref in config setting
  * Issue 50850 - Fix dsctl healthcheck for python36
  * Issue 49990 - Need to enforce a hard maximum limit for file descriptors
  * Ticket 48707 - ldapssotoken for authentication
  * Bump version to 1.4.3.2
  * Issue 49254 - Fix compiler failures and warnings
  * Ticket 50741-cont bdb_start - Detected Disorderly Shutdown
  * Issue 50836 - Port Schema UI tab to React
  * Issue 50842 - Decrease 389-console Cockpit component size
  * Ticket 50790 - Add result text when filter is invalid
  * Issue 50627 - Add ASAN logs to HTML report
  * Issue 50834 - Incorrectly setting the NSS default SSL version max
  * Issue 50829 - Disk monitoring rotated log cleanup causes heap-use-after-free
  * Ticket 50709 - (cont) Several memory leaks reported by Valgrind for 389-ds 1.3.9.1-10
  * Ticket 50784 - performance testing scripts
  * Issue 50599 - Fix memory leak when removing db region files
  * Issue 49395 - Set the default TLS version min to TLS1.2
  * Issue 50818 - dsconf pwdpolicy get error
  * Issue 50824 - dsctl remove fails with "name 'ensure_str' is not defined"
  * Issue 50599 - Remove db region files prior to db recovery
  * Issue 50812 -  dscontainer executable should be placed under /usr/libexec/dirsrv/
  * Issue 50816 - dsconf allows the root password to be set to nothing
  * Issue 50798 - incorrect bytes in format string(fix import issue)
  * Bump version to 1.4.3.1
  * Ticket 50798 - incorrect bytes in format string
  * Issue 50545 - Add the new replication monitor functionality to UI
  * Issue 50806 - Fix minor issues in lib389 health checks
  * Issue: 50690 - Port Password Storage test cases from TET to python3 part 1
  * Issue 49761 - Fix CI test suite issues
  * Issue 49761 - Fix CI test suite issues
  * Issue 50754 - Add Restore Change Log option to CLI
  * Issue: 48055 -  CI test - automember_plugin(part2)
  * Ticket 50667 - dsctl -l did not respect PREFIX
  * Issue 50780 - More CLI fixes
  * Ticket 50649 - lib389 without defaults.inf
  * Issue 50780 - Fix UI issues
  * Ticket 50727 - correct mistaken options in filter validation patch
  * Issue 50779 - lib389 - conflict compare fails for DN's with spaces
  * Set branch version to 1.4.3.0</changelog>
  <changelog author="william.brown@suse.com" date="1592568000">- Add 0001-Ticket-51161-fix-SLE15.2-install-issps.patch to resolve bsc#1172328
  This corrects a failure to install on SUSE due to incorrect hostname
  generation, and a python 3 utf8 issue that is triggered by systemd.</changelog>
  <changelog author="william.brown@suse.com" date="1594814400">- Remove patch that is now included in latest release:
  0001-Ticket-51161-fix-SLE15.2-install-issps.patch
- Resolve bsc#1174057 upstream stability and fix rollup.
- Update to version 1.4.3.11~git0.82796f172:
  * Bump version to 1.4.3.11
  * Issue 51192 - Add option to reject internal unindexed searches
  * Ticket 51159 - dsidm ou delete fails
  * Issue 51165 - add more logconv stats for the new access log keywords
  * Issue 51188 - db2ldif crashes when LDIF file can't be accessed
  * Issue 51165 - add new access log keywords for wtime and optime
  * Issue 50696 - Fix Allowed and Denied Ciphers lists - WebUI
  * Issue 51169 - UI - attr uniqueness - selecting empty subtree crashes cockpit
  * Issue 49256 - log warning when thread number is very different from autotuned value
  * Issue 51157 - Reindex task may create abandoned index file
  * Issue 51166 - Log an error when a search is fully unindexed
  * Ticket 51161 - fix SLE15.2 install issps
  * Issue 51144 - dsctl fails with instance names that contain slapd-
  * Issue 50984 - Memory leaks in disk monitoring
  * Issue 50201 - nsIndexIDListScanLimit accepts any value
  * Bump version to 1.4.3.10
  * Ticket 49859 - A distinguished value can be missing in an entry
  * Issue 50791 - Healthcheck should look for notes=A/F in access log
  * Issue 51072 - Set the default minimum worker threads
  * Issue 50912 - pwdReset can be modified by a user
  * Issue 51100 - Correct numSubordinates value for cn=monitor
  * Issue 51136 - dsctl and dsidm do not errors correctly when using JSON
  * Issue 51132 - Winsync setting winSyncWindowsFilter not working as expected
  * Ticket 51072 - improve autotune defaults
  * Issue 50746 - Add option to healthcheck to list all the lint reports
  * Issue 51118 - UI - improve modal validation when creating an instance</changelog>
  <changelog author="william.brown@suse.com" date="1596369600">- Update to version 1.4.3.12~git0.9bc042902:
  * Bump version to 1.4.3.12
  * Issue 51222 - It should not be allowed to delete Managed Entry manually
  * Issue 51129 - SSL alert: The value of sslVersionMax "TLS1.3" is higher than the supported version
  * Issue 51086 - Fix instance name length for interactive install
  * Issue 51136 - JSON Error output has redundant messages
  * Issue 51059 - If dbhome directory is set online backup fails
  * Issue 51000 - Separate the BDB backend monitors
  * Issue 49300 - entryUSN is duplicated after memberOf operation
  * Issue 50984 - Fix disk_mon_check_diskspace types</changelog>
  <changelog author="william.brown@suse.com" date="1606824000">- Resolves bsc#1178445 (crash in paged chaining search)
- Resolves bsc#1176889 (mapping tree may be invalid)
- Update to version 1.4.3.17~git0.3c2d054e1:
  * Bump version to 1.4.3.17
  * Issue 4384 - Use MONOTONIC clock for all timing events and conditions
  * Add dsconf replication monitor test case (gitHub issue 4449) in  1.4.3 branch
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4467)
  * Backport fix for failing tests from master branch
  * Issue 4112 - Added a CI test (#4441)
  * Fix pytest test collection
  * Issue 4460 - BUG  - lib389 should use system tls policy
  * Issue 3657 - Add options to dsctl for dsrc file
  * Issue 3986 - UI - Handle objectclasses that do not have X-ORIGIN set</changelog>
  <changelog author="william.brown@suse.com" date="1614686400">- bsc#1181159 - CVE-2020-35518 - resolved in 1.4.3.19.
- Cherry pick build fix from 1.4.3.20:
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 389-ds-base-1.4.3.19~git0.bef0b5bed:
  * bump version to 1.4.3.19
  * Issue 4609 - CVE - info disclosure when authenticating
  * Issue 4581 - A failed re-indexing leaves the database in broken state (#4582)
  * Issue 4579 - libasan detects heap-use-after-free in URP test (#4584)
  * Issue 4563 - Failure on s390x: 'Fails to split RDN "o=pki-tomcat-CA" into components' (#4573)
  * Issue 4526 - sync_repl: when completing an operation in the pending list, it can select the wrong operation (#4553)
  * Issue 4324 - Performance search rate: change entry cache monitor to recursive pthread mutex (#4569)
  * Issue 5442 - Search results are different between RHDS10 and RHDS11
  * Issue 4548 - CLI - dsconf needs better root DN access control plugin validation
  * Issue 4513 - Fix schema test and lib389 task module (#4514)
  * Issue 4534 - libasan read buffer overflow in filtercmp (#4541)
  * Bump version to 1.4.3.18
  * Issue 4513 - CI Tests - fix test failures
  * Issue 4528 - Fix cn=monitor SCOPE_ONE search (#4529)
  * Issue 4504 - insure that repl_monitor_test use ldapi (for RHEL) - fix merge issue (#4533)
  * Issue 4315 - performance search rate: nagle triggers high rate of setsocketopt
  * Issue 4504 - Insure ldapi is enabled in repl_monitor_test.py (Needed on RHEL) (#4527)
  * Issue 4506 - BUG - Fix bounds on fd table population (#4520)
  * Issue 4521 - DS crash in deref plugin if dereferenced entry exists but is not returned by internal search (#4525)
  * Issue 4418 - lib389 - fix ldif2db import_cl parameter
  * Issue 4384 - Separate eventq into REALTIME and MONOTONIC
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue 4414 - disk monitoring - prevent division by zero crash
  * Issue 4507 - Improve csngen testing task (#4508)
  * Issue 4486 - Remove random ldif file generation from import test (#4487)
  * Issue 4489 - Remove return statement from a void function (#4490)
  * Issue 4419 - Warn users of skipped entries during ldif2db online import (#4476)
  * Issue 4418 - ldif2db - offline. Warn the user of skipped entries
  * Issue #4504 - Fix pytest test_dsconf_replication_monitor (#4505)
  * Issue 4480 - Unexpected info returned to ldap request (#4491)
  * Issue 4373 - BUG - one line cleanup, free results in mt if ent 0 (#4502)
  * Merge pull request #4501 from mreynolds389/issue4500
  * Issue 4272 RFE - add support for gost-yescrypt for hashing passwords (#4497)
  * Issue 1795 - RFE - Enable logging for libldap and libber in error log (#4481)
  * Issue 4492 - Changelog cache can upload updates from a wrong starting point (CSN)
  * Issue 4373 - BUG - calloc of size 0 in MT build (#4496)
  * Issue 4483 - heap-use-after-free in slapi_be_getsuffix
  * Issue 4315: performance search rate: nagle triggers high rate of setsocketopt (#4437)
  * Issue 4243 - Fix test (4th): SyncRepl plugin provides a wrong (#4475)
  * Issue 4460 - BUG - add machine name to subject alt names in SSCA (#4472)
  * Remove invalid mapping tree CI test
  * Issue 4284 - dsidm fails to delete an organizationalUnit entry
  * Issue 4243 - Fix test: SyncRepl plugin provides a wrong cookie (#4466)</changelog>
  <changelog author="william.brown@suse.com" date="1621339200">- bsc#1185356 - CVE-2021-3514 - resolved in 1.4.3.23.
- Remove xcrypt build patch (now upstream)
  * 0001-Issue-4588-BUG-unable-to-compile-without-xcrypt-4589.patch
- Update to version 1.4.3.23~git0.f53d0132b:
  * Bump version to 1.4.3.23
  * Issue 4725 - [RFE] DS - Update the password policy to support a Temporary Password Rules (#4727)
  * Issue 4759 - Fix coverity issue (#4760)
  * Issue 4656 - Fix cherry pick error around replication enabling
  * Issue 4701 - RFE - Exclude attributes from retro changelog (#4723) (#4746)
  * Issue 4742 - UI - should always use LDAPI path when calling CLI
  * Issue 4667 - incorrect accounting of readers in vattr rwlock (#4732)
  * Issue 4711 - SIGSEV with sync_repl (#4738)
  * Issue 4649 - fix testcase importing ContentSyncPlugin
  * Issue 2736 - Warnings from automatic shebang munging macro
  * Issue 2736 - https://github.com/389ds/389-ds-base/issues/2736
  * Issue 4706 - negative wtime in access log for CMP operations
  * Bump version to 1.4.3.22
  * Issue 4671 - UI - Fix browser crashes
  * lib389 - Add ContentSyncPlugin class
  * Issue 4656 - lib389 - fix cherry pick error
  * Issue 4229 - Fix Rust linking
  * Issue 4658 - monitor - connection start date is incorrect
  * Issue 2621 - lib389 - backport ds_supports_new_changelog()
  * Issue 4656 - Make replication CLI backwards compatible with role name change
  * Issue 4656 - Remove problematic language from UI/CLI/lib389
  * Issue 4459 - lib389 - Default paths should use dse.ldif if the server is down
  * Issue 4663 - CLI - unable to add objectclass/attribute without x-origin
  * Bump version to 1.4.3.21
  * Issue 4169 - UI - updates on the tuning page are not reflected in the UI
  * Issue 4588 - BUG - unable to compile without xcrypt (#4589)
  * Issue 4513 - Fix replication CI test failures (#4557)
  * Issue 4646 - CLI/UI - revise DNA plugin management
  * Issue 4644 - Large updates can reset the CLcache to the beginning of the changelog (#4647)
  * Issue 4649 - crash in sync_repl when a MODRDN create a cenotaph (#4652)
  * Issue 4615 - log message when psearch first exceeds max threads per conn
  * Bump version to 1.4.3.20
  * Issue 4324 - Some architectures the cache line size file does not exist
  * Issue 4593 - RFE - Print help when nsSSLPersonalitySSL is not found (#4614)</changelog>
</package>
<package pkgid="0bb8f5ca08000ad7500f44054acc71a13c7912b008d93ba227685020da6e2e56" name="libtsan0" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="276da675b8dbd951aa26fe15598818215273560c1315f16ad61bb6ebe35ebabe" name="libtsan0" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="ac613b194d1dc6fe4169b77f5515b15603b841a5d9e9d3f25d97801e6429b92a" name="libtsan0" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="6074156fe1f5bbfee36d88e6bb87c80c92c9563074752baa9af5e979f157465f" name="libturbojpeg0-32bit" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="7c8c17f296b6505abc493bc40a7abf69e5958a13816300fc8f480c487b2f8184" name="libturbojpeg0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="d46242c5e882212b13698d4d551b0ea6f803fe2e9416b437fd77e3869119fd9e" name="libturbojpeg0" arch="aarch64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="3909496463651536b89b0e792413f768f019cd10247ac625a0a48ccaf9d16968" name="libturbojpeg0" arch="i586">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="b81a8d7549aeb4066b8de0a0f74de1c33a09612759441d93073bc395206d68e6" name="libturbojpeg0" arch="ppc64le">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="000cb995a33010d48e7d9e7a58202afe51384aa19957d5f0a49d1f360b2af885" name="libturbojpeg0" arch="s390x">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="9cdd21dff75e8b41e4a7f667382cfbc2530f8657fcaadf4e3c4b4b46fcccb593" name="libturbojpeg0" arch="x86_64">
  <version epoch="0" ver="8.1.2" rel="5.18.1"/>
  <changelog author="pgajdos@suse.com" date="1507809600">- security update:
  * CVE-2017-15232 [bsc#1062937]
    + libjpeg-turbo-CVE-2017-15232.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- - update to version 1.5.3
  1. Fixed a NullPointerException in the TurboJPEG Java wrapper that occurred
  when using the YUVImage constructor that creates an instance backed by separate
  image planes and allocates memory for the image planes.
  2. Fixed an issue whereby the Java version of TJUnitTest would fail when
  testing BufferedImage encoding/decoding on big endian systems.
  3. Fixed a segfault in djpeg that would occur if an output format other than
  PPM/PGM was selected along with the `-crop` option.  The `-crop` option now
  works with the GIF and Targa formats as well (unfortunately, it cannot be made
  to work with the BMP and RLE formats due to the fact that those output engines
  write scanlines in bottom-up order.)  djpeg will now exit gracefully if an
  output format other than PPM/PGM, GIF, or Targa is selected along with the
  `-crop` option.
  4. Fixed an issue whereby `jpeg_skip_scanlines()` would segfault if color
  quantization was enabled.
  5. TJBench (both C and Java versions) will now display usage information if any
  command-line argument is unrecognized.  This prevents the program from silently
  ignoring typos.
  6. Fixed an access violation in tjbench.exe (Windows) that occurred when the
  program was used to decompress an existing JPEG image.
  7. Fixed an ArrayIndexOutOfBoundsException in the TJExample Java program that
  occurred when attempting to decompress a JPEG image that had been compressed
  with 4:1:1 chrominance subsampling.
  8. Fixed an issue whereby, when using `jpeg_skip_scanlines()` to skip to the
  end of a single-scan (non-progressive) image, subsequent calls to
  `jpeg_consume_input()` would return `JPEG_SUSPENDED` rather than
  `JPEG_REACHED_EOI`.
  9. `jpeg_crop_scanlines()` now works correctly when decompressing grayscale
  JPEG images that were compressed with a sampling factor other than 1 (for
  instance, with `cjpeg -grayscale -sample 2x2`).</changelog>
  <changelog author="pgajdos@suse.com" date="1528804800">- security update:
  * CVE-2018-11813 [bsc#1096209]
    + libjpeg-turbo-CVE-2018-11813.patch
  * remove redundant libjpeg-turbo-CVE-2017-15232.patch
    [bsc#1062937#c17]</changelog>
  <changelog author="pgajdos@suse.com" date="1529409600">- security update:
  * CVE-2018-1152 [bsc#1098155]
    + libjpeg-turbo-CVE-2018-1152.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1543838400">- asan_build: build ASAN included
- debug_build: build more suitable for debugging
- disable silent rules</changelog>
  <changelog author="pgajdos@suse.com" date="1552478400">- security update
- added patches
  CVE-2018-14498 [bsc#1128712]
  + libjpeg-turbo-CVE-2018-14498.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573560000">- security update
- added patches
  CVE-2019-2201 [bsc#1156402]
  + libjpeg-turbo-CVE-2019-2201.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573646400">- security update [bsc#1156402]
- modified patches
  % libjpeg-turbo-CVE-2019-2201.patch (use upstream one)</changelog>
  <changelog author="pgajdos@suse.com" date="1591617600">- security update
- added patches
  fix CVE-2020-13790 [bsc#1172491], heap-based buffer over-read in get_rgb_row() in rdppm.c via a malformed PPM input file
  + libjpeg-turbo-CVE-2020-13790.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1622721600">- security update
- added patches
  fix CVE-2020-17541 [bsc#1186764], stack-based buffer overflow in the "transform" component
  + libjpeg-turbo-CVE-2020-17541.patch</changelog>
</package>
<package pkgid="1737af588df644acd24fb772d49f35058dc96e8c754f74c8dda2142f86507784" name="libu2f-host" arch="src">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="6621136d2167758199402883687b91db89603ea297cfd125b58e55a07b729cce" name="libu2f-host-devel" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="476e9decc2ee6177d987865bd9916bb3f1f2b3877d6bdf711905dd52231aa6b9" name="libu2f-host-devel" arch="i586">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="6883d5639fc1805ca8147d54df94c2baacca3bcd90784c0106682a12cf2b10ab" name="libu2f-host-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="c74dffac156a5b897846334c4514adbfaff8d9876de014b81a49f6835fd679fe" name="libu2f-host-devel" arch="s390x">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="d85fa9696417c0c06a2c0e53128b7c1fb765e2709dcb6a1672a394ae40a7b420" name="libu2f-host-devel" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="5ea415c5dde314e1c4bbc4720454916f199f0adca1d490e2f2eca64824541b1c" name="libu2f-host-doc" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="494275ecebdab5d0759126396d1769cf892f3defef688b5817ee8bbb973b4ab4" name="libu2f-host-doc" arch="i586">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="5ccc47889245b8bd4c22706c9c5db4ebc7b0f4067d299c8de362a571c8e155e0" name="libu2f-host-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="b3565e239f2aa8dedc25b5052dd8bc7b4ceb3c69a9e069092b96272ee52ff233" name="libu2f-host-doc" arch="s390x">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="92d36a47a264edd1d5abdb314ed69169164c76ccf697802bae7a57115751a329" name="libu2f-host-doc" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="47c5e001a7992208ff96de0d5874e75e916a18728caa31156630d45fd3e01045" name="libu2f-host0" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="c86ad793193b4e9fc40e81b9c8b553627f9aa04ff55f03357e6135c8d322ed59" name="libu2f-host0" arch="i586">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="d2e1d01a185dac7d992b8e4cba1f4717dc24bf698be994258877afd02bc0fb69" name="libu2f-host0" arch="ppc64le">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="be888c726627ddac8b4475ba348da55fe7cc6a4066bfe3a57e454fc0ab8bd224" name="libu2f-host0" arch="s390x">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="2fb803b0bf8025c176f01090b8b681bcd67d28e7a477ac82b4a80895188c4172" name="libu2f-host0" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1549627200">- Version 1.1.7 (released 2019-01-08)
  - Fix for trusting length from deivce in device init.
  - Fix for buffer overflow when receiving data from device. (YSA-2019-01,
    CVE-2018-20340, bsc#1124781)
  - Add udev rules for some new devices.
  - removed libu2f-host-CVE-2018-20340.patch (upstream)
- Using %license macro
- Applied spec-cleaner</changelog>
  <changelog author="kbabioch@suse.de" date="1549627201">- Added libu2f-host-CVE-2018-20340.patch: Fixed an unchecked buffer, which
  could allow a buffer overflow with a custom made malicious USB device
  (bsc#1124781 CVE-2018-20340).</changelog>
  <changelog author="kbabioch@suse.de" date="1551787200">- Version 1.1.8 (released 2019-03-05)
  - Add udev rules
  - Drop 70-old-u2f.rules and use 70-u2f.rules for everything
  - Use a random nonce for setting up CID to prevent fingerprinting
  - CVE-2019-9578: Parse the response to init in a more stable way to prevent
    leakage of uninitialized stack memory back to the device (bnc#1128140).
  - removed libu2f-host-CVE-2019-9578.patch (upstream)</changelog>
  <changelog author="kbabioch@suse.de" date="1551873600">- Version 1.1.9 (released 2019-03-06)
  - Fix CID copying from the init response, which broke compatibility with some
    devices.</changelog>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.10 (released 2019-05-15)
  - Add new devices to udev rules.
  - Fix a potentially uninitialized buffer (CVE-2019-9578, bsc#1128140)</changelog>
  <changelog author="kbabioch@suse.de" date="1559044801">- Added libu2f-host-CVE-2019-9578.patch: Fixed fix filling out of initresp
  (CVE-2019-9578 bsc#1128140)</changelog>
  <changelog author="malte.kraus@suse.com" date="1598011200">- Add support for json-c 0.14.0 (json-c-update.patch)</changelog>
  <changelog author="paolo.perego@suse.com" date="1620216000">- Fix some compilation warnings about signedness in b64 routines
- Fix some compilation warnings about unused variables
- Using %autosetup macro</changelog>
</package>
<package pkgid="ae5fa000e3df18b772dcdfe1682824ecfd37dd41488362d46c2f237abe1ab6a0" name="libubsan1" arch="aarch64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="e81a07bc62949c63e9f47681c343fca92aac4c05e0294754d252caa2e32cea7f" name="libubsan1" arch="i586">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="5ab7b5e4f66e1e9fc4ad7673d64664956f4ecd3ed7d6d06a3397e0bd2b63cd56" name="libubsan1" arch="ppc64le">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="b40c06557c3aae300ebc54e777b4c588f5f48e2f18f142bff2b2cb6bdacfea58" name="libubsan1" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="08caa2301069adbd3e7c1e3f7b669c9310f317379f8e5988910a67f6fb5f82a5" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="991a70722d79beb2ad4486f84a48f6509ea82a64a0ac8ed0bdaebf4357f0edd7" name="libubsan1-32bit" arch="s390x">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="79313f6fd4bf7f4d63d350fc151e49be3a3edae2e64828225e0fd6bca0559fcc" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="10.3.0+git1587" rel="1.6.4"/>
  <changelog author="rguenther@suse.com" date="1605614400">- Update to gcc-10 branch head (98ba03ffe0b9f37b4916ce6238), git958.
  * Includes fix for memcpy miscompilation on aarch64.
    [bsc#1178624, bsc#1178577]</changelog>
  <changelog author="rguenther@suse.com" date="1605787200">- Add gcc10-amdgcn-llvm-as.patch to fix build of amdgcn offload
  compiler with llvm11.</changelog>
  <changelog author="rguenther@suse.com" date="1606392000">- Enable fortran for offload compilers.</changelog>
  <changelog author="rguenther@suse.com" date="1606478400">- Do not specify alternate offload compiler location at
  configure time.
- Update README.First-for.SuSE.packagers
- Install offload compilers for gcc10-testresults build</changelog>
  <changelog author="rguenther@suse.com" date="1606910400">- Update to gcc-10 branch head (e563687cf9d3d1278f45aaebd), git1030
  * Includes fix for firefox build [gcc#97918]</changelog>
  <changelog author="rguenther@suse.com" date="1612353600">- Remove include-fixed/pthread.h
- Change GCC exception licenses to SPDX format</changelog>
  <changelog author="rguenther@suse.com" date="1614772800">- Update to gcc-10 branch head (85977f624a34eac309f9d77a5), git1331
  * Includes fix for [bsc#1182016]
- The 32bit nvptx libgomp plugin is no longer built, do not attempt
  to package it.</changelog>
  <changelog author="rguenther@suse.com" date="1616587200">- Update to gcc-10 branch head (592388d4f6e8a6adb470428fe), git1450</changelog>
  <changelog author="rguenther@suse.com" date="1617278400">- Update to gcc-10 branch head (892024d4af83b258801ff7484), git1574
  * Includes GCC 10.3 RC1</changelog>
  <changelog author="rguenther@suse.com" date="1618488000">- Update to GCC 10.3.0 release (63fa67847628e5f358e7e2e7e), git1587
- Disable nvptx offloading for aarch64 again since it doesn't work</changelog>
</package>
<package pkgid="a382fb70b5c5d90fd41308195af685fbf09f604336959396b24c2602686ba711" name="libvirt" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9b8622c6be15e8f3755a7dafb6a84274e4baf0f8c5457f9a0192bf667d6576ef" name="libvirt" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0af1ebfac3acb016bf4ce359f4927be3934f2be9d7fee91257471970c0cbd729" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1aef3c160d788dd9766eee5f463b2ef1a0556ee06e50a87844a4fc3f76fd95bd" name="libvirt" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4a38b0a94dbc84d878a0ed204c537e2108573ffb04e7f44da5cdda4ecfaa31bc" name="libvirt" arch="src">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="cf27deb291ad66bb9f568cfb1430833f6788f2a73b4c569c394aab8ff246c9f2" name="libvirt" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e4054c4d976e3207d61a5a1c9dd34cf60260e397670ccefc7f2327a4b2fe4aa2" name="libvirt-admin" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3e893b6a0dd3231bf65b710ce1e6ce772da05e43e9a909af7078c7361b7a8ff7" name="libvirt-admin" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="93e99a4ab3dac3e551ad02a2f17d5cb98a7b93334974bf68f96f96d3cfff0e5b" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1c21cc90aac9679c0df49bdf25f43cb2f96bea84491226869cfe6ee4729eda47" name="libvirt-admin" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="77377bed74cb2dc468a1c78d8c73825f8ee546e3970576f0b962b1601c3bcefb" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a7f15b1cf654487d53f5d96756539593b96eadf44033660703e96a5267c3b2db" name="libvirt-bash-completion" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="200a4c6713aeb8ab0eb8cd4bdc4ac07504cd34121c7b8f54fe1bda14ff152d8b" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="48a28a1171e64b0cd4fa1adef7e1a32b13a2946edaa989deb8cfb6dd52d8709c" name="libvirt-client" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="967cb1be0cf97bef8be094605294ce6f237dc318b6086e9c6486b9ffdc178143" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="07641f9b6adc12edfc205d1d0cb68f5ee2b90a140c4a2c47f5f627dbb93e8fd0" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4e92fbdf149fdd60d06937d9dd46de3731f18f9d9dffd11c71f2fa34ed50f258" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="54300f88cda5c3a908e581d84257e8e66400ee488b6f7defee35f4d086385e26" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a6fdbf8f03369cdddad841aff5366f3143a9de1f593f716dddae8ac90af168bb" name="libvirt-daemon" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="adf6bce30e4ce1912d355bc57fbcc3124a93e2a2f99e5d7df83785d28a145d0f" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ae58307363d928950623c2b6bf783fd5c5349593a691d4fccdb9bc2ea1b64d34" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="37eaed08353dc218b6d58abac0f41c0519291b77ccae7c3c181533c36ec3dffc" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ba9579cc0f3851012e1dc0120d79402b52a1b050a39473748b66a87ff57b3aa2" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8154b82143cd7abc48308c0acedd52933eb7b561d4244b48dbb121f35497b9a8" name="libvirt-daemon-config-network" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="196ead84fd3282d74702f8b707750e27936aafef2f6a70dc2e6701d5e8c73f2b" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="73249e1bf1179c8a927caeee0221df98ca641a8ed480c3715954dd2324b8c2ee" name="libvirt-daemon-config-network" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9d263341a978947507a9a1cfad588d1ef26c916eb8c151884e856da8f73420cf" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1e82cff354c03d66d8b78ba4b2deb638336c5cddb4f9b53891616d31f82d56bf" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="cfd07f8ac241871b2632ff030a6eee508c72ca5953805b44bd71166867d74765" name="libvirt-daemon-config-nwfilter" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="38adbbb5fde1673ebbf6d4c5c98d7d32c1914df1de3c66f24c9c888aeb877b12" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e1b0f45106353583ff952d36005e8148d5749f978e58eaaaf077ce8b949ea9ea" name="libvirt-daemon-config-nwfilter" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="315ec1748b3e7a20555c37d85295bb58d821a79941acf0bf2487019a97724850" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="bec0fe8154b2077b5723f1347664071b9159e1ed07c1d67f0e38b04898c72f30" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4f66a1ac5b111a8dc6cb4cec491b3ed8baca98f942fd9e93ae3a20e94e2b50ff" name="libvirt-daemon-driver-interface" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="608c755f41096d0a00246b5c7d31646e4b202abd8a9ab725c5144c531baa38d3" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5001f35b7e6773363a1356235349c51d6fbdcb7839511eab05fe46f87bfa2e63" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="27e01fa7a2e74767aaf6d55dc444868649be66c10c899df370d5179e43a648d1" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a8ec7446ed6442665012073ecdcbcadcb4c09885fea79ada0eaf8f40d3e109a1" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="eaed44ec26250321899e929026f22ba08a0956e7d819066c6ce41918607fa421" name="libvirt-daemon-driver-lxc" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="57d9c629628c2bc63e3eaf57e3f1d0a16d5a171c63d82e6ae08d5129d513befa" name="libvirt-daemon-driver-lxc" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ce3c2163512993bf5ebbbee9af65fca73d08595e88c5bbe0f749533bace3e2f7" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7bb6b12f636f6f6d973a7b31414c9a3079268ad43edf7d2e2e8ecc7bc1834b79" name="libvirt-daemon-driver-lxc" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6e225658d6bc056649694bf712df24b493d50af417b5d4459f7570384c14c745" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="99a08fd087fb137b661888e6aaa88dc1ad3f2f4a52c0fbe51e5352b85e60c41e" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9f79baa35b92bc0c32a23c0c3440bdddea658b4fc67968838a9c5b10e1e632e1" name="libvirt-daemon-driver-network" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0dbc413b0cf5dc4397bb1f6ced2023fbcf47533167dd12ca66366234cbb0ea08" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9518d3f70b32e337f9b2e5dae77b55b30104013056d9a8a9a9e9f9364bda11f7" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="00ea6de3bbb84f28c21a5d02f5d7ec62b47fd7a52ce38ce69e50bdb259fb06e2" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4ea891e0eae87d67556ffba81ce4d75fefce7d5bc84ec0ac0f86bdd3762240f4" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f349680f01215abca91e20d59e3f0386925810d1889ee6d01af669faa64a6297" name="libvirt-daemon-driver-nodedev" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="011a2759bec397d9dce142f293f813bbcde6f2ab51aedcc3754bc26708f0f4af" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d61c83956b47d13282d47258f7b712e332b9422d7b7b9ae4c5e8b37691f7a993" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1b4c438be41bab520e81af482db8d57208dd9bb6cf12a103fd67d959968dc934" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6d52799ec04e47600921d7e2f5c7804a45d7a0013e428e7e0818b1932345049f" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f23c191f94c5ee73b62ceef5a6329a4a3644bd93eebda44afeecbdc1493657b7" name="libvirt-daemon-driver-nwfilter" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="407d31f9356a5905c8be7c9bbd0d90bc16129c6e8fb37b5b2fa229f8972c5187" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2a9e749d507268b4ce96cd05756daca8ac99ac36c95e05b58c86f6935d6c16b0" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b8c74045b9f01043e8f4f47174aba51fa8e08c07412ae296c8747e705e5817fa" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9d97b50a70d880c6ad6a5dc430ce9f93a0f9da30817360a86894ee81f22eb2af" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="72d9774f7516afd47ed9c7c88d7cb8be0668ec18331428841af9faa0da2537e0" name="libvirt-daemon-driver-qemu" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1318624505864daf52d64336ff9c09c95eca1f297502efee0579a834f13eca36" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a39463948ed4db38c47d2ea781db92078f5f90989290b9c16acf109a88603922" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b254207074b2a915c5ff846d539b9a8c465f95ec4b09823209f9ea8fb1bac4b2" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="cd08f03d1514bebb86bcd6f0d35f602f3d99c28c556a618db8e2c679c3af595e" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4544ec30f07afbfee9f270dcebfaa59c791d1fc6bc3e0414b312191afe8a3c48" name="libvirt-daemon-driver-secret" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="afb800a65e2e2fc1ffc731122cb2dfe173e69b048faf0bf3c672eb72ad05de6a" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8a7c29a320a765bed033a6061dd985c64735d5864c8c0767f97af1ff85dc18e0" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="88c3fd803968914a66c78d2ed573d2661cf974da8d38118315fee0e2ab8c2e6e" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2269ae457c9882acafa7b81ee0181838852d6b52c3e93d538eceb41a55c47565" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5e78eccd941cf8debea6e4fe5f3f96ed42f43e7ce5962a515161c0949eed4b62" name="libvirt-daemon-driver-storage" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2547f80ecb182d3cf0b55d8f43b7518f7c9ccfcd71a528ad3465d3a9ea3ef7e6" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c5cce3ad5ef72a7d0c85c2eea8111643a0f967f667f8d1c9efaccfce77058ddc" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1cc145b5250c4514dbe543b0a82437f4219377a43414b60e7f4c0c6f8951c365" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6533946f06024fbe5c07b9ddf31cccc384174769e62deac1688eac4f61612b68" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5510b8347a1c83763d632e83ca117cdf62076465e22273db66d0b2784da1bd23" name="libvirt-daemon-driver-storage-core" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0fc89011d0f31d8f3da960dfcee3db9bf9c7b8ad92b1068852bd0eb96445276c" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="332956df60e606d1ef546620e367f43633cc28286f274f65c381d85ffbe0c578" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="52ec2ec6e44f3a9c2820da8959b2f15c9f25a6e169a340fb183aadb5a29609a6" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0da95a4bec093460673b581b17c279378e27b49cc7723eeaf56dc975c4e1f1e6" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="49b9bd14445c234f732cea3c2876ee98f196ce7c37f475d11b57c92ddd78a968" name="libvirt-daemon-driver-storage-disk" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c96d22f23f622156c41d1e5a184f1fec0a4dec494a4cfd65f0c114394b1473b9" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ccca93c0088089547ed7e0e7a7a66246db5da16936ce24bbfc6826bacabdcc8e" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="90a7d3b8604bf3816c5a1354abf719c1e981851944b66c6709379c6fc85c5503" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="46ee202f38b944ba4a44d32700eaab3ee5aa40701e0a5c4f405a5ea92815f078" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2bc27a666979bd536dad8b9222a9eed38115cc0671dcf46c646c8957644695f4" name="libvirt-daemon-driver-storage-iscsi" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1bf416c78d1d9b4e13d216e6e0c9fcffecc35018bfd93470447e46797a50280b" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0fc067984c86909d55b49919d9e3ea32af1eb2ea983674dcad3c7182c5d688e7" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d8776a77f309d7ebf7bed65adff19646f5e10fed9a660439125d90a622ed8600" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0f30944038507c89ee981e42bfacee5b5c1a0f831fea0b50f4ad7d22c7ad4dcb" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e3ebce9248087ca9891a8ec54d62c843e73d58cca3f3e50d181cf11256160f1" name="libvirt-daemon-driver-storage-logical" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a9084854ef13455c52ea36a1e70f6e353aba6ac43244eec19a83a312f00baca0" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8f0dd2e6dd84fc4c49d6e017f8f60828d94b6f5fa7e68ea1fe137e04a21d6302" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c93f1a87ce33dc92a80ca359417d18e91db16adedc7856f28b00a37a102906f3" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="5601e57230ef42577069a564b05169c0af622efc27a3efceb53d281cc75b09c7" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e557481b7f8a334e8852e46ecf39f44769757dbf11e6455d0d836a951a7efff" name="libvirt-daemon-driver-storage-mpath" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ba5c3eae89212d9162daf4d39efc9afb35d73c0b2770e32d908ec6172381dec1" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="bb74f20e2ea140cf7bbade72f68711dd212d1eead8b48630ca526278ae633a81" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="42a61789002d183ac1f31cda7168b44b14f1688258d50b36778c1d34c71cee78" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0518efe1010a485348e4c671c5fd1e21c7dac37d17302119b88de52227110260" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e115e58179852d0bd0d531f00b5fe58e894ada3db4a5854a747756e5cfeba921" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="c275a8183235befaf13edc00398df51df40979e9b1bad2f2eedfc19904760fa5" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b23bb129a50a166c303a8f3638203347bb37dfb9a20d43d84a6bf751192efe1f" name="libvirt-daemon-driver-storage-scsi" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="857def62e21a8cab9b9885ee66944266d8e30d82556d198309e39f96df3a013d" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="19e7a041b350c47b20d8c85a3a556f19210974ceb3074ddbd6a6b89a7bb9e6b8" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="205202de47cf54794b857c2d4f89fd4c496215afc91ce9e0c5bdf7d3cbccad46" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a9122427af7c78b1d64bdf7961116174fd00a9ffa590cb67a5c653459ff73edb" name="libvirt-daemon-hooks" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b348a27e6d18a318e0cdc53a70803adf0a5fbbd0874271131256f277d4326d3f" name="libvirt-daemon-hooks" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2d265002f5698c3897c1c451d1e2491f86349cb22317543f9cf27a062dd0bc46" name="libvirt-daemon-hooks" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e1a412ab90f0ab182dc62cd07d579c5e463b43aad3abc44c3f2961f511c77c6a" name="libvirt-daemon-hooks" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4bd37dd3fa484bfbf46733c8a647780ba9cfc9405eff9ea5e1748cf3435cfcc3" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3dfd009427b8391759a812961efd9809f83432350664c77ccd3f84eb30931678" name="libvirt-daemon-lxc" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="057293e6c4907952164412cbc7008189c625d64f079a1d6c0c4de2931e2014eb" name="libvirt-daemon-lxc" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4f8c36ecbb069b8666ef792541da6351eba5471bfdd2c5b980ccdce0bbf2d101" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1799f778c45f16ecc6e08fd6eab54884b77bf58001c589d99c2a691b778f24b2" name="libvirt-daemon-lxc" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="ad7127cc7397fdd21003a64e44ee1e1036494bd268942b88b1c9769dc04d6ff6" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3ad949333161ff774d164a05c9548c2c5b279ef668a723b9c17a6d5feac8ee3d" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="1017c537bc68d26582b67fa370aa0fd941a3fd0b99e7f66fafb609bc23ca79b6" name="libvirt-daemon-qemu" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="e7348e40d2fd9374f18e70e8aed4a8d5d44fdb35a1928653e9c36de01f6f7069" name="libvirt-daemon-qemu" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="134dc7037c15548d5ed711f5491b64ea8daa9c694d7bb6b012ef131b359941e5" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6b4b4081dc4baf67b1ae125962b5d5a0e0d09bb23982bf85311e8dc34cccb10d" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9e7e94e46d6c6f058ee6e745960142c2498a622233012a8f6c9d9bca333eb3af" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d0c0988fd852c4ed9e8d9569068e32c4d3c13b3ff4d074fc02bada7409c8f3b8" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9f10ee38c8fac5bf2bde31109dd45d67892e6198359761b77e1980f3f13a6d4e" name="libvirt-devel" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7ece49d714fa5eca1a11d4990eceb366ae72c45bec7928c5bcabfb1c1c3ec0da" name="libvirt-devel" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f2aca565ce6cee3629177df7110b7f688f792f84d1d47f3e5136be547841e45a" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="6f7953fe2fd327ea68f3754b4833831b9371490c4c70b48b1c35733992f215f1" name="libvirt-devel" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="3e1826c1e0cdd9d0bd9e6318900e8150dc452e2231700ceb6e17cfb1150b67fe" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="9049fef585a6925e211a96fe5bf43bf2b91a3ff1891d28b5355092343c5fbce4" name="libvirt-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a4f9780b055e0937c37742ae7dc34c2f681af5cc4f8c97b6777297df4642fbc4" name="libvirt-doc" arch="noarch">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7a9c21b19e3a78714632f546fb4b6673c53935369f83cc5ec5b3664dba1c4bc6" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="7aa023ce59ff0c713144506f4845250ecb457d151d4395886f55871b5485eaa7" name="libvirt-libs" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="431017d71d63c85e651d05d6e901b781d21f235e1b3d2d4f616b81b8ce79e6e7" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="df863570cf655c30fc2937be3252678db4f7433d1e4d3f9099750fed020e2cd9" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2e686ef181dd8eddb7d28adfea6e1dbe38eef17ce604bb4d02a33491d549fbf2" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="85f91e345d2542a532f173ca2f612cfd125e7ea8101d2c5e21cf2300481893bc" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="4cef288af87979d2215fb932f42c320447f5fad20604c3a3aeb80dfb7c785cac" name="libvirt-lock-sanlock" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b0f4370ca3f3a90af35220709590c76bfe86e99260a3c421dfce49a1e30d481e" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="0dae36a26b88f4a534d6d11b746240ebf9d01e51679ccf3217f06b9fe04a13b1" name="libvirt-lock-sanlock" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="2c825d99dea23f0a8ce3f059391c4bc3987b4d82255b2d5fd61b0b676daf3e8e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="a30502a488c7ead14b34aee2a6bc53616485905988f4b55603d05d6d9a89b061" name="libvirt-nss" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="f3d558cedca56020f5afde09b2e6d36a0ca41c007c6adf19f828cd2e3c76baec" name="libvirt-nss" arch="i586">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="b7d9ed796e3a4ac22d1ad98251bcec183a53014875c2441fe0ad466f79540cd9" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="8f48b0295734425c84b18a5589027a46f9719e0fa0c41e98543d720f5349d4c4" name="libvirt-nss" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d9ec7d089dbaea8d659ea6dddbc5f88c7994714a38930566e3b273d2676be3b4" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="13.13.1"/>
  <changelog author="jfehlig@suse.com" date="1611144000">- qemu: end the agent job in qemuDomainSetTimeAgent
  d61f95cf-qemu-end-agent-job.patch
  boo#1174607</changelog>
  <changelog author="jfehlig@suse.com" date="1613995200">- libxl: Fix domain shutdown
  87a9d3a6-libxl-fix-domain-shutdown.patch
  bsc#1182515</changelog>
  <changelog author="jfehlig@suse.com" date="1614168000">- libxl: Add lock process indicator to track resource locking
  fa58f571-libxl-lock-proc-indicator.patch
  bsc#1182367</changelog>
  <changelog author="jfehlig@suse.com" date="1615809600">- virtlockd: Fix crash on exec-restart
  6b8e9613-avoid-use-after-free.patch,
  eab7ae6b-fix-array-access.patch
  bsc#1183411</changelog>
  <changelog author="jfehlig@suse.com" date="1616155200">- qemu: Fail VM creation if unable to fill machine type
  67b973b5-qemuDomainDefPostParse-no-machine.patch
  boo#1183767</changelog>
  <changelog author="jfehlig@suse.com" date="1617364800">- spec: Remove use of %fdupes since it was only acting on files
  that should be excluded
  bsc#1184293
- Remove bogus comment from /etc/sysconfig/libvirtd
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1619697600">- qemu: fixing auto-detecting binary in domain capabilities
  6d786f95-qemu-fix-dom-caps.patch,
  c7600931-qemu-rework-dom-caps-cache.patch
  bsc#1185119</changelog>
  <changelog author="jfehlig@suse.com" date="1619784000">- resolve hangs/crashes on libvirtd shutdown
  c5bf40bf-add-driver-shutdown-helpers.patch,
  018e213f-always-init-prio-cond.patch,
  255437ee-add-threadpool-funcs.patch,
  1eae52b9-rpc-fix-double-unref.patch,
  0f38dedd-add-virNetDaemonSetShutdownCallbacks.patch,
  b776dfa8-add-shutdown-facility-netserver.patch,
  94e45d10-rpc-finish-threads.patch
  bsc#1182783</changelog>
  <changelog author="jfehlig@suse.com" date="1620043200">- qemu: Add virtio related options to vsock
  19d4e467-improve-virDomainVirtioOptionsCheckABIStability.patch,
  bd112c9e-qemu-add-vsock-virtio-options.patch
  bsc#1182364</changelog>
  <changelog author="jfehlig@suse.com" date="1621339200">- qemu: Do not require TSC frequency to strictly match host and
  ensure TSC tolerance interval is bounded
  d8e5b456-qemu-no-not-require-tsc-freq-match-host.patch
  f7c40b5c71-qemu-tsc-tolerance-interval-closed.patch
  bsc#1184858</changelog>
</package>
<package pkgid="d3afcd951e2a4f57f6f360cb8b4f01b0aae80097b29ede7b828fd7e9201cf7e4" name="libwebkit2gtk-4_0-37" arch="aarch64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="6b899d64161a6e7c72d499da510795765664436c2ee713041fe809118a648bbd" name="libwebkit2gtk-4_0-37" arch="i586">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="058cc04ed7cff886b92be5aec6ddc0ec77df5adfea6603176f97ac863b0d66cf" name="libwebkit2gtk-4_0-37" arch="ppc64le">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="61a51eb2bccae1bbd8cb5c2a8bb054259a20c0f32aa91c053142f6c3d6ab9520" name="libwebkit2gtk-4_0-37" arch="s390x">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="40f2c169a55878169a61ca5bb7292b7118cb097339d3ccafc7b9f4c9a4074ff8" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="2aadfe19d06b29d93734d8657e7434f84e8a8868644f442aff4da8485bf1bc5f" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="fdfd8f9cb87609f79573a0ecec616c27e0854b1cfb4135b07c0d48f1d469f6ad" name="libwebkit2gtk-4_0-37-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="7955d9912716e7dab31bfc88880fee74df4c0b0a22de0e2b62d8bc46d5a435f1" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.32.0" rel="6.7"/>
  <changelog author="mgorse@suse.com" date="1606046400">- Update to version 2.30.3 (boo#1179122 boo#1179451):
  + Add new build option USE(64KB_PAGE_BLOCK).
  + Fix backdrop filters with rounded borders.
  + Fix scrolling iframes when async scrolling is enabled.
  + Allow applications to handle drag and drop on the web view
    again.
  + Update Outlook user agent quirk.
  + Fix the build with video support disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-13584, CVE-2020-9983, CVE-2020-13543.
- Drop webkit2gtk3-fdo-soname.patch: fixed upstream.
- Rebase webkit-process.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
</package>
<package pkgid="c0da44478704cbb3e64945f2f1abdc80d33b92829bc63cf9dc63cfb678e8750b" name="libwebp" arch="src">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="9d2489f49a9c03ca718560daf8b0d6dc634eb728eb9a46b00da98826f1634afb" name="libwebp-devel" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="5e591c90a86b33de8725de4546ad57c1c4c2ae3eb579b3bd542ca8b27e221fc7" name="libwebp-devel" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="efb470e9387ce1f64e1b5a863ff3390694a1c6c2cd82b7baabcf0b356e3d75d6" name="libwebp-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="4dc0dd27a04eba1513c0a55399488b3c3aa47929341470123559814996c17035" name="libwebp-devel" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="12f1abb9bda461cf30e8068142ae6240620c9c5303809f77074ff3f77647c724" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="c59655a260b69ef3985ff5fcc000a6d7d38f0d1a064d67c1a2243b002aa2f138" name="libwebp-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="d0fe7abf1df7e052f21f109b5b275e3736cad68d321e089805adda771db80c25" name="libwebp-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="a85dd4a9d1465cb15ccd0309b78cd19c33cce84ca945fa71463d189265bd21f7" name="libwebp-tools" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="c7fc10316565d756380e5963bd0ff6e00581f87ee5a083b3b4f44123961e6e9b" name="libwebp-tools" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="3cc788ee68c3f99990bd2604cb5f0d6ae85c3475b779ad853c84406fe53e7860" name="libwebp-tools" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="792c7fa22bdf17983093bd496f93c5ba6d232db84d434dddc875f8e9a7283490" name="libwebp-tools" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="b999d914577709968fc415570dc64f7a3f93561a19b81a3f6cc36688140c923c" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="691cee5a6377d42f5d539eb2e4fbb23b4fbd2920d14bb63ef01ce528d73158e1" name="libwebp6" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="f523c28370fc744fcd3e15b60881642eced688d6bc29838582f9ddaf9ed8eacf" name="libwebp6" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="3b2d9ff69b89c2cd871369774dd99a411cab2f271212a868947248370cd93a06" name="libwebp6" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="d7312ec4c10924f139a56c8341d42a91bebde2259aab1124af94f93931208c81" name="libwebp6" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="ace026bd0a629d3f69f398a237a5e23afeda230dd5f727c4e4fceacf8bb6a314" name="libwebp6" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="3c0cf3496d9f458b1e4e3a762fa3a2bad52c9991f99c2d88aaf04a36ed624690" name="libwebp6-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="af1b1e8c034149988bb928033bb5da1e162fdc79c619bef6ec9e749718406a1c" name="libwebp6-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="f82bc6c2455c2e8f507b3be1ff971f49c51a040c5ac1eb706c7b5be4cb2ab91f" name="libwebpdecoder2" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="2dca1840338fa6db666fff74066531dd4bb88ff401a8cf1d539c1008272eaf02" name="libwebpdecoder2" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="7aadbb0ae0a23f7f13d180cd91474b620c255dc76a98329bf2cab5f03c5c5b92" name="libwebpdecoder2" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="5220c637ffdd7ab07dfc201431d44cf76ff3aa7b67df4bf096730f873af03867" name="libwebpdecoder2" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="5029173c6aba8a8193f2d5a26fcd15914c9256041b36867eabdbfa84bf5776e7" name="libwebpdecoder2" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="4cbe3d9dc4480442f56b8daac27004b0abdb9d53363393c06612177a0757f2bb" name="libwebpdecoder2-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="709571cc997a7a314309e5928d08c9801b71f0c2cc3c6e7994cd69dcaa9635b6" name="libwebpdecoder2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="4b3821fc0a4536b7b7c348dc6d427e503456aba4ef3231a7462a69c2847260fe" name="libwebpdemux2" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="de2afe808c98aee1554f07df00a686251e42f0687c4b141e346ea33ac0111d88" name="libwebpdemux2" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="a908a3ad6f068ce1f673da8f579251b9f12cb7da0f2add02db48c85c9e34e089" name="libwebpdemux2" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="59ed5214c0d017d5e09f85963c17906d3c6ea5ae940fdb5a67dbd281bee206e6" name="libwebpdemux2" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="210857645a1757098369a9c8522c0b18f7dca3cb19adf3a7232b190af541e4ed" name="libwebpdemux2" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="d3f0529205afcee28185cb38044587bcd0c172be3fe001a6a8e71ff7d37e1c9a" name="libwebpdemux2-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="1e7092402a4560f2dbe8bcaa0b2d17020340275868fe41081814c65926140e80" name="libwebpdemux2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="30463470f22b1b41a8fe3b0d9b10a6bbba0720808e7972868a31ecbc6e25b01b" name="libwebpextras0" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="f0f0323e7d0d75029cd3e1bb84e63c3778696c54c3d0ced0894c757d6a52146f" name="libwebpextras0" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="a780824ff3776786b476eab6657d435c79e6564642c484c6a5a2a4f8d59eda7b" name="libwebpextras0" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="0bd2f54e7b941c7bb21b18bb88abb98ee0581ea12d636d7830b35d26bc434e00" name="libwebpextras0" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="d1daa1a68fdbaf05ef83f17f05ea90a1d515322b3da9623d71c88e8b248b3ae7" name="libwebpextras0" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="ef467462905706eadf045867ba2573f82e9a4da1949d33bc46d6f6df21010087" name="libwebpextras0-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="7306fe71ec3e39bb0ab94f3f1f37ca619a115bd28a2bed761d5086ce0b6824fa" name="libwebpextras0-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="41c7de6e2370e187667f4c0a69bd5b817dd8e737d1e1b2e0c365ecd37c0d4b11" name="libwebpmux2" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="5684093d1d4f4212d58b422c9683b0bb5f4c530c66d225e67d62b7ba73a1814b" name="libwebpmux2" arch="i586">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="228bc215809f4ab24112f39931350a5e088be6461668197cccdd160c27d3b686" name="libwebpmux2" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="d11fa74e72f9d4c85a024782afb76572cc67a5f09e314aeff29551a249c8571b" name="libwebpmux2" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="f748b48f1930905380d2312e14e4913197101db47d5e3f00a7f7141747614dd2" name="libwebpmux2" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="525a4e57e14834f9206efa1500e8d13f838e5777845a4619ba1db770c5dffeff" name="libwebpmux2-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="050c6a3422720aea6986dcf23da09426260584c1a297182cd48fec53fe0ba282" name="libwebpmux2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="0.5.0" rel="3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mgorse@suse.com" date="1620907200">- Add libwebp-CVE-2020-36328.patch: fix invalid check for buffer
  size (bsc#1185688 CVE-2020-36328).
- Add libwebp-CVE-2020-36329.patch: fix for thread race heap use
  after free (bsc#1185652 CVE-2020-36329).
- Add libwebp-CVE-2020-36330.patch: fix riff size checks
  (bsc#1185691 CVE-2020-36330).
- Add libwebp-CVE-2018-25013.patch: wait for all threads to be
  done in DecodeRemaining (bsc#1185654 bsc#1186250 CVE-2018-25013
  CVE-2018-25014).
- Add libwebp-CVE-2020-36331.patch: fix possible overflow when
  validating chunk size (bsc#1185686 CVE-2020-36331).
- Add libwebp-CVE-2018-25010.patch: fix alpha-filtering crash when
  image is larger than radius (bsc#1185685 CVE-2018-25010).
- Add libwebp-CVE-2018-25009.patch: fix overflow while reading
  VP8X chunk (bsc#1185673 bsc#1185690 CVE-2018-25009
    CVE-2018-25012).
- Add libwebp-CVE-2020-36332.patch: better handling of bogus
  Huffman code (bsc#1185674 CVE-2020-36332).</changelog>
  <changelog author="mgorse@suse.com" date="1622116800">- Add libwebp-CVE-2018-25011.patch: fail on
  multiple image chunks (bsc#1186247 CVE-2018-25011).</changelog>
</package>
<package pkgid="0059964aeca01f704b3cc1dc99c1a7311eb0f920fc51364096faafab3b6facee" name="libwoff2common1_0_2" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="af128855275dd8ca6912e75cd85e48701f003be0e1108b973d72ac557435b568" name="libwoff2common1_0_2" arch="i586">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="57bc1b73bc165d16852867b40f1fa83c2ff285ac2de31307153c0f63ebf97265" name="libwoff2common1_0_2" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="445a1f46c28e91f34531cf3344af08c8ade4f204beb5913248fa98fa20dbade4" name="libwoff2common1_0_2" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="025aabe8f460aaea8361798c142de1dfa3b096e7c154f070a9fc9d198f2368c3" name="libwoff2common1_0_2" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="6287f57205ef14114ece3439f03bfcff50c2bc924171c414d963bac463023df8" name="libwoff2common1_0_2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="6273b3237d360a8dd0d6237cab283bcaccb36229a9607f004bdb353e4d95ed73" name="libwoff2common1_0_2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="8f145647898752a96cf4a4d2d4cba57660eef28dc285c04290bf600f591899c8" name="libwoff2dec1_0_2" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="2761fbbece56c487e73022aa38b09f325524879c11ca7f278d68e2a5ab87b6e7" name="libwoff2dec1_0_2" arch="i586">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="e958482ec03282494773d94294bf37b6a36eda4c84bf34bc1d52ff8707d98796" name="libwoff2dec1_0_2" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="1178931b621988110115bb03bbba90c3d1cf6c8b00cc9b809f2be786950c4e53" name="libwoff2dec1_0_2" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="293e001e9c6c7cf156dea05df0a0c9df3063143bc8c97f7e3213d2e88f431586" name="libwoff2dec1_0_2" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="aeba8366808e4a0fcaac5c566c2e1316d3f5664560e0ff0bee21226607f409e4" name="libwoff2dec1_0_2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="5319a530459f4e79c8dc58ce8bc24eb5ca02c3d7b4e6d2265fa6a347f4139395" name="libwoff2dec1_0_2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="c0fbd5c985db670cea57387fa4491fe89e148c7930275bbb08e90df7c8bd8abd" name="libwoff2enc1_0_2" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="60bb79b9f0514a65b4f3cd0febf9ec501363f667d8ff929f57a3201dcbe05c0f" name="libwoff2enc1_0_2" arch="i586">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="e974bb8848c7e3be902b17b2562cc8ba0ddb36eef88ffb8caa651072548c738b" name="libwoff2enc1_0_2" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="f23b45429be7d0aac86a201c49573c98c4b38bb9220328ab2708c9f132f04408" name="libwoff2enc1_0_2" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="0c331b0500b3cf5feb7e991050f4977492db7e65806f4d381cee0be2a6b0b5d8" name="libwoff2enc1_0_2" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="42fe9601b970a7e5edf9dd3e10366336325cb111dfdc7eed7d24ca04a2c1a005" name="libwoff2enc1_0_2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="983e7bd6eea94c2a87c0c5612614d8d84ff87f9061df5c64b1b13829a29a45dd" name="libwoff2enc1_0_2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.0.2" rel="3.2.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1525176000">- Initial packaging.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1531310400">- Add baselibs.conf, build 32bit support libs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532433600">- Add woff2-fix-overflow-when-decoding-glyf.patch: Check for
  overflow when decoding glyf.
- Add libwoff2dec1_0_2 and libwoff2enc1_0_2 to baselibs.conf too.</changelog>
</package>
<package pkgid="dfcceb300e434b52ea6bc6bf0917a62bacf9cf3c9f168526a0c8f2f1acda4a04" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="9f4c772eb41823d0b221b77ba35b60013ae4339223b0eebcf293281dc14b4eec" name="libxml2-2" arch="i586">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="86e2b33896944bcc7c39c0b30461762e2dc3f01d7c917b310c13984322cb22e5" name="libxml2-2" arch="ppc64le">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="d95c6fcb73e1b4dda5514d19817465c8c01fe96c1782310201c842651be5f2ce" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="6b6c4c4c09eccc1534a2815e805ef7e94ccb5bce92d20453b3fe4f022ea873b1" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="d6c2232eb732318135364e8870dc26656e67058e87e2a43bba6261b0628da865" name="libxml2-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="0a9d3c159aaa3cffc33708cdaffcb84de04d67a20c9a3be60b8fc6d5c4066160" name="libxml2-2-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="ad83662ab71e1e2fc9d365247a3a679d5695ae96239817d93b4ceae4ec6be338" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="044a5e222ed692d7315d0111d1385af00b9ece262b81ba631c9ac29679d59a95" name="libxml2-devel" arch="aarch64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="244295390a3977e86b8bd87a6acb9d077cd71f9d28be70b236bae32394cbefc5" name="libxml2-devel" arch="i586">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="3e27106c2dcc90f7371933e24012fb5e53fa7a8a064a49a94d764b4f5bca9382" name="libxml2-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="7eb9dfd22bfe534c9cf752fb46178e4e21ffd220aac0a9c2ecba4263499deb23" name="libxml2-devel" arch="s390x">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="e9a9afcb63fd16700880f05c801d6a2575e84baaa0babcb22907930ddc1ae02a" name="libxml2-devel" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="7aa93668abd5d742220d9626fde10d5539a179bf0422a9b1c41db8dde3a58c1a" name="libxml2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="7fa5383eb9cdbf8a6e0605de3b05c5f45d80b3bd7acf74b9170ce2e660fc6a0d" name="libxml2-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="b4e22f69e659e0b1dfbd9241d5dc9d6fb0a74d7d8d5099b63913a79905091c16" name="libxml2-doc" arch="noarch">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="11dbe6c131950036d9821db6382b2e5374213c1dcc4be20ad92644bc3a9da7fa" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="801b2e2c7904e76ce65e7945befeb0e0a42d80b5a738d7a3d5b94e723d8627d0" name="libxml2-tools" arch="i586">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="44ebf14289cdfb12931606265336d7af75b4b5c8634750be000d6fc9b2a35786" name="libxml2-tools" arch="ppc64le">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="99756c39254d0a3bfaf007e656a549274ed1711369bbfac38bc6f042d452f380" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="177201032ce97cc630efe6e61c0c092dc63a6f642c16c6b5103422325b489f2d" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="e1731a1e327468ec677c6629380abceaa5c7856a625221d941a06891e46c43eb" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="5d8f715182e7973b9cd97e367fd494dcac2f6e29322eb689259e39852ca38da6" name="libzypp" arch="i586">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="aab7b440a51c3fc81c2a6cd76c9bb74a51beccfd5219282ed2a61813bf09ef34" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="607afc36004b53da950ef143aea18e4b323e2de73289f6b914298af6c068a2d7" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="e4dca709ed0047ac40180134e28cf42a7ee54677c2f5c44d504858fab4775542" name="libzypp" arch="src">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="752105ce3d5f7ba1241b6e726038e8d18b584be962ea70c63b2133cd379ed239" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="395ca937acf0a689f3726ff3b881099f767f0d856acdeb77a3c022c6c836cd3c" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="1b18082f231481b207bbf48014ada48698e18bef44330d23a13a272b87cc0343" name="libzypp" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="01a3ac7db77c4bed0f978bd59c826f70a9a011740f242c70b975b6071d673ecc" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="dc383fbaf3c191b14ab390526c0062185a4c427c772ab32e91bfd4f351003de4" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="1b0b71623767dd1476686385602f2c2794db2b340e286eb5e24f0b926d92e060" name="libzypp" arch="src">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a2bb04504294bf5d136f25596e18de040e26c3fe081a50880b63d62e0909573f" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="6da41393a5e290b8a7e286b4f533546fbe83ba34e21b25ea50b8b9a831839d0f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="0486df5f9e94384a6ce319a307e1347bfe20b0d675fd11261e2ba8e5e96d8743" name="libzypp" arch="i586">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="04e110fb185ff02d3cf00df9a26df9c536ef96aba6e5fa8f801420e7a9e4ebb9" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="60a05555f252426fc2ca6f83f5e07fd3ba5ee7d43cbce43e73878a96f01093f7" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="b5b3aa766470570717b516f8ae2e21d564c2772ce9a2ea1b89fcac833885a3ef" name="libzypp" arch="src">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="809883f0a0a86e8f62f75b7d7d4e1f912acb1375f2783db0681c9d5d15baff58" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="40df6891870e2db7a645b84eaf8ddea439ab7ac94762fa326704feef69c732ec" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="06c17f83ea5c49cf1a129f6f39e40ab564843f1490830da12118fc0e524311dc" name="libzypp-devel" arch="i586">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="27574b94b799b8759c972c9f1ed42896c7ad1338177457d59ef606f9f73133d1" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a0e2f568315fde9d60095324cf64eb0ca495a5514a1c8db9623cc38d818cff8c" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="42d86b8bd196a1278782fe154c0f2ab6ebeb4d37442f08e7fd3b0eabb2b5d7f2" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="0b0acb4d5c7ccc0297e99759b5cd95a2c7560f41e4e30cd78c2eb1bef1c84806" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="b189358903f254c1f6c794b751d7900a8c92e997e354bfd88c752f97fba6f719" name="libzypp-devel" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a37e9a7cbbbd5edf5fcb9826be454039398a07bc583181073c77323cc5b4d2ae" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="17500c379bc3ff0075094666a558255a65664d17f96d4c91254332ddd6658a8a" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="56f514574675a2538bef598d0c8a210a2427582b7493d1f96830a60bfe3776b3" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="a339389398287891bb973ba649dae88b6c5f2a8127249250e99e6cd5a0f6f8e6" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="1fff84edb4bf9cc9ff6f2ea8dd523eab2751deeb1966a282cf26821f508bc856" name="libzypp-devel" arch="i586">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="a6f2cb14cbdc50e04c6458e74c833ce69e4ab95af7eb7a7568e8eafe47a5bb01" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="210702fce910e07583a3fa67d38f41d8dd39bb87ffc9e4f3b146d5b05753140c" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="644645d2fb9800b4824cb980146df900ad267f98b9140009543791af8c4fc921" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="dd6bc964fd11ed51b685cc54040df7f1f09b7c958f5e0aa42405568e8c0776b0" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="dd87b899b364f908425ed42751310ce9e7835acfb44929673ebd6943f5aed00f" name="libzypp-devel-doc" arch="i586">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="3d8898f4c2325af15c32ba8e4537a7926bade7345c672cbd36b30ecc463d2de7" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="ed57b988ed7d52908d9ea7656e308020fcd9fddf963d8cfc59613f32b5511c9e" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="710a5d6263e4e138689024eea5a1d62e480197d9b8aa8526e09d7714c3fe399d" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="3.69.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="7656f8dfe4277652eb52306e58f42033b8ec9efb80d59ad64a8c9084bbe37410" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="eff76eaaef113923646738fb5e74608998c091293d905b9cadf15d34f4168aa8" name="libzypp-devel-doc" arch="i586">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="d34406a92fbfb98cefc453a5315c6b5e4e0fb98d9431f22f3374af17f0766fdd" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="24708b02a8d7b056a7b0dae64e06e8d002f3fd20b6d9247f6689e5a07d6aacd6" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="60ecd8b51ab5d3551872c7a361a6feef8fe922a53ae5eef45d96fd46800df97c" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.25.10" rel="6.1"/>
  <changelog author="ma@suse.de" date="1601035200">- Fix bsc#1176902: When kernel-rt has been installed, the
  purge-kernels service fails during boot.
- Use package name provides as group key in purge-kernel
  (bsc#1176740 bsc#1176192)
  kernel-default-base has new packaging, where the kernel uname -r
  does not reflect the full package version anymore. This patch
  adds additional logic to use the most generic/shortest edition
  each package provides with %{packagename}=&lt;version&gt; to group the
  kernel packages instead of the rpm versions.
  This also changes how the keep-spec for specific versions is
  applied, instead of matching the package versions, each of the
  package name provides will be matched.
- version 17.25.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix sevice detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
</package>
<package pkgid="00f5ac0275b0c05c4732bb9f3a0b1019ffdb9156de2cf25884948a1a9007172a" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="6b39387b19319af6b6e056e5b330af08a56380058cd80edd25e81997c1456044" name="libzypp-devel-doc" arch="i586">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="9b0a5e49bfd459faf97cc451131d5777146a7fb3042fc97db2c8acd3c7d875fe" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="85720299c617abfc00d148da8d9adaddf6cee1ed7f78536f6b638869a4dc771f" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="0d6511743997c3cad1fc36b10c8bc7c5e593ad846692eec5d36f0444dcdf0109" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.26.0" rel="9.1"/>
  <changelog author="ma@suse.de" date="1602072000">- Bump version to force rebuild against a fixed libsolv.
  (bsc#1177238, bsc#1177275)
- version 17.25.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1606478400">- RepoManager: Carefully tidy up the caches. Remove non-directory
  entries. (bsc#1178966)
- RpmDb: If no database exists use the _dbpath configured in rpm.
  Still makes sure a compat symlink at /var/lib/rpm exists in case
  the configures _dbpath is elsewhere. (bsc#1178910)
- Url: Hide known password entries when writing the query part
  (bsc#1050625 bsc#1177583, CVE-2017-9271)
- adapt testcase to change introduced by libsolv#402.
- RepoManager: Force refresh if repo url has changed (bsc#1174016)
- RepoInfo: ignore legacy type= in a .repo file and let RepoManager
  probe (bsc#1177427, Fixes openSUSE/zypper#357).
- version 17.25.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1606996800">- Prevent librpmDb iterator from accidentally creating an empty
  rpmdb in / (repoened bsc#1178910)
- Fix update of gpg keys with elongated expire date (bsc#1179222)
- needreboot: remove udev from the list (bsc#1179083)
- Prefer /run over /var/run.
- version 17.25.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1607688000">- Fix lsof monitoring (bsc#1179909)
- version 17.25.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1610452800">- Rephrase solver problem descriptions (jsc#SLE-8482)
- Adapt to changed gpg2/libgpgme behavior (bsc#1180721)
- Multicurl backend breaks with with unknown filesize (fixes #277)
- version 17.25.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1613563200">- Patch: Identify well-known category names (bsc#1179847)
  This allows to use the RH and SUSE patch categrory names
  synonymously:
  (recommendedi = bugfix) and (optional = feature = enhancement).
- Add missing includes for GCC 11 compatibility. (bsc#1181874)
- Fix %posttrans script execution (fixes #265)
  The scripts are execuable. No need to call them through 'sh -c'.
- Commit: Fix rpmdb compat symlink in case rpm got removed.
- Repo: Allow multiple baseurls specified on one line (fixes #285)
- Regex: Fix memory leak and undefined behavior.
- Add rpm buildrequires for test suite (fixes #279)
- Use rpmdb2solv new -D switch to tell the location ob the
  rpmdatabase to use.
- BuildRequires:  libsolv-devel &gt;= 0.7.17.
- version 17.25.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1614168000">- Try to provide a mounted /proc in --root installs (bsc#1181328)
  Some systemd tools require /proc to be mounted and fail if it's
  not there.
- Enable release packages to request a releaxed suse/opensuse
  vendorcheck in dup when migrating. (bsc#1182629)
- version 17.25.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1619092800">- Add missing includes for GCC 11 (bsc#1181874)
- Fix unsafe usage of static in media verifier.
- Solver: Avoid segfault if no system is loaded (bsc#1183628)
- MediaVerifier: Relax media set verification in case of a single
  not-volatile medium (bsc#1180851)
- Do no cleanup in custom cache dirs (bsc#1182936)
- ZConfig: let pubkeyCachePath follow repoCachePath.
- version 17.25.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1619611200">- Properly handle permission denied when providing optional files
  (bsc#1185239)
- Fix service detection with cgroupv2 (bsc#1184997)
- version 17.25.10 (22)</changelog>
  <changelog author="ma@suse.de" date="1622548800">- Work around download.o.o broken https redirects.
- Allow trusted repos to add additional signing keys (bsc#1184326)
  Repositories signed with a trusted gpg key may import additional
  package signing keys. This is needed if different keys were used
  to sign the the packages shipped by the repository.
- MediaCurl: Fix logging of redirects.
- Use 15.3 resolver problem and solution texts on all distros.
- $ZYPP_LOCK_TIMEOUT: Let negative values wait forever for the
  zypp lock (bsc#1184399)
  Helps boot time services like 'zypper purge-kernels' to wait for
  the zypp lock until other services using zypper have completed.
- Fix purge-kernels is broken in Leap 15.3 (bsc#1185325)
  Leap 15.3 introduces a new kernel package called
  kernel-flavour-extra, which contain kmp's. Currently kmp's are
  detected by name ".*-kmp(-.*)?" but this does not work which
  those new packages. This patch fixes the problem by checking
  packages for kmod(*) and ksym(*) provides and only falls back to
  name checking if the package in question does not provide one of
  those.
- Introduce zypp-runpurge, a tool to run purge-kernels on
  testcases.
- version 17.26.0 (22)</changelog>
</package>
<package pkgid="10304a3c59e86696c7008300425e91390da41c3f17551297e19693720eb16aa1" name="lz4" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="c84f9cd1604b8c20c1b5fa402925a9114df171da3045c3a12bdc2c8d87495c86" name="lz4" arch="i586">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="f560e379b4d42d06ae56784fc07b6708ea385b01ac09f8134434531aaacd07f4" name="lz4" arch="ppc64le">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="bfdac9b8f995c7e7a70f8a9e92d011a9f88b344075ae45f5556f26c0e11f9c10" name="lz4" arch="s390x">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="3e264e93de34493253f746b4f5b5eaa2ddd6e0184c3802b23f0ff5c57480795c" name="lz4" arch="src">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="222766f9f4ca46695c6926c4eb8b20d632761b38d41af76d75d3cfb523263411" name="lz4" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="da839bd21e519d5cd342a659d4f41af5a989bb88018e5f259fc34af3be472af4" name="lz4" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="29bb464856dffbcf78430966bd2baf67dbc206f45448781dc0f8f5dfdf830c83" name="lz4" arch="i586">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="8c4a6ae23fbbfec193bec8462518e5ecd17dc6466adb92f179f94f5572716ef4" name="lz4" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="e5a4c081e8cf4c2bfa40d6c7abfef985b4dec5e22fb92de99439e2a48595d1ea" name="lz4" arch="s390x">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="defafb8859aa24bf3b3c9c20d1b925e600912c9da14e3a003b75248636de0f88" name="lz4" arch="src">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="1b19a1fcf10f950f0b0b3c00b2007cbd1b62353105b4280d3b728242a3683681" name="lz4" arch="x86_64">
  <version epoch="0" ver="1.9.2" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="avindra@opensuse.org" date="1518004800">- Update to new upstream release 1.8.1.2
  * Most visible new feature is support for dictionary compression
  * Support is now more formally added on the API side within
    lib/lz4frame_static.h. It's early days, and this new API is
    tagged "experimental" for the time being.
  * Support is also added in the command line utility lz4, using
    the new command -D. The behavior of this command is identical
    to zstd, should you be already familiar.
  * lz4 doesn't specify how to build a dictionary. All it says is
    that it can be any file up to 64 KB.
  * This approach is compatible with zstd dictionary builder, which
    can be instructed to create a 64 KB dictionary.
  * Improved performance at ultra settings (levels 10+).
  * These levels receive a new code, called optimal parser,
    available in lib/lz4_opt.h.
  * New parser uses less memory (from 384KB to 256KB), performs
    faster, compresses a little bit better (not much, as it was
    already close to theoretical limit), and resists pathological
    patterns which could destroy performance.
  * New parser is directly compatible with lower compression levels,
    which brings additional benefits:
    + Compatibility with LZ4_*_destSize() variant, which reverses
    the logic by trying to fit as much data as possible into a
    predefined limited size buffer.
    + Compatibility with Dictionary compression, as it uses the
    same tables as regular HC mode
  * In the future, this compatibility will also allow dynamic change
    of compression level.
  * Small set of bug fixes and improvements:
    + perf : faster and stronger ultra modes (levels 10+)
    + perf : slightly faster compression and decompression speed
    + perf : fix bad degenerative case
    + fix : decompression failed when using a combination of
    extDict + low memory address
    + cli : support for dictionary compression (-D)
    + cli : fix : lz4 -d --rm preserves timestamp
    + cli : fix : do not modify /dev/null permission as root
    + api : _destSize() variant supported for all compression
    levels
- partial cleanup with spec-cleaner
- drop lz4-use-shlib.diff, breaks build
- misc spec cleanups
  - remove Makefile fix
  - build and install separately
  - New URL</changelog>
  <changelog author="astieger@suse.com" date="1530187200">- lz4 1.8.2:
  * speed inprovemtns for compression and decompression
  * fix compression compatible with low memory addresses
  * fix decompression segfault when provided with NULL input
  * cli: new command --favor-decSpeed
  * cli: benchmark mode more accurate for small inputs</changelog>
  <changelog author="astieger@suse.com" date="1539345600">- lz4 1.8.3:
  * minor decompression speed improvement (~+2%) with gcc
  * fix corruption in v1.8.2 at level 9 for files &gt; 64KB under
    rare conditions
  * Add new command --fast
  * api: LZ4_decompress_safe_partial() now decodes exactly the
    number of bytes requested</changelog>
  <changelog author="jengelh@inai.de" date="1559822400">- Update to new upstream release 1.9.1
  * Decompression speed was improved by about 12% (x86/x64).
  * New option `lz4 --list` to inspect the block type, checksum
    information, compressed and decompressed sizes (if present). The
    command is limited to single-frame files for the time being.</changelog>
  <changelog author="pgajdos@suse.com" date="1571140800">- version update to 1.9.2
  * decompression functions were reading a few bytes beyond input size
  * api: lz4frame initializers compatibility with c++, reported by @degski
  * cli : added command --list, based on a patch by @gabrielstedman
  * fixes CVE-2019-17543 [bsc#1153936]</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- enable testsuite
- verbose build</changelog>
  <changelog author="pgajdos@suse.com" date="1620993600">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="d15ffac0922e1d894e53bb8dfafaa8465a042f7d1d02de30989da0234d6006f1" name="lz4-test" arch="src">
  <version epoch="0" ver="1.8.0" rel="3.8.1"/>
  <changelog author="jengelh@inai.de" date="1417176000">- Update to version 1.4+svn124
  * LZ4F_compressBound() may be called with NULL preferencesPtr
  * LZ4_loadDict now returns the dictionary size instead of 1
  on success
- Add lz4-soversion.diff to address ABI changes</changelog>
  <changelog author="jengelh@inai.de" date="1459598400">- Update to new upstream release 131 (library 1.7) (boo#973735)
  * slightly improved decoding speed
  * lz4frame API is included in liblz4
  * new -m command line option to compress multiple files
  * new lz4 and lz4hc compression API (old one retained)</changelog>
  <changelog author="dimstar@opensuse.org" date="1484568000">- Add baselibs.conf: provide liblz4-1_7 as -32bit compatibility
  package, required by systemd-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1499256000">- Update to new upstrema release 1.7.5 (2017-01-03)
  * back to the old version scheme
  * lz4hc: new compression levels 10-12
- Remove lz4-soversion.diff (not needed),
  lz4-killdate.diff (no longer needed)</changelog>
  <changelog author="ddiss@suse.com" date="1502798400">- Use official upstream repository; (boo#1053910)</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Update to new upstream release 1.8.0
  * cli: fix: do not modify /dev/null's permissions.
  * cli: added POSIX separator "--" for specifying that all
    following arguments are non-options.
  * cli: restored -BX command enabling block checksum.
  * API: added LZ4_compress_HC_destSize() and
    LZ4F_resetDecompressionContext().
  * API: lz4frame: negative compression levels trigger fast
    acceleration.
  * API: lz4frame: ability to control block checksum and
    dictionary ID.
  * API: fix: expose obsolete decoding functions
  * API: experimental: lz4frame_static.h:
    new dictionary compression API
  * doc: Updated LZ4 Frame format to v1.6.0, restoring
    Dictionary ID field in header.
- Add lz-export.diff</changelog>
  <changelog author="pgajdos@suse.com" date="1571227200">- turn on the testsuite
- added sources
  + _multibuild</changelog>
  <changelog author="pgajdos@suse.com" date="1571313600">- security update
- added patches
  CVE-2019-17543 [bsc#1153936]
  + lz4-CVE-2019-17543.patch
  merge LZ4_compress_destSize_generic and LZ4_compress_generic
  + lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1571400000">- less intrusive patch for CVE-2019-17543 [bsc#1153936]
  - lz4-merge-_destSize-variant-to-LZ4_compress_generic.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- security update
- added patches
  fix CVE-2021-3520 [bsc#1185438], memory corruption due to an integer overflow bug caused by memmove argument
  + lz4-CVE-2021-3520.patch</changelog>
</package>
<package pkgid="7a59d412dd20d85ede3efe9d3da6fb30e1dfb7ffc7a273a1cd812c1203cce490" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="4ef15e41151b0e64c2960ebd391733e31459d0034c52b3579cbd90f0acfb1e73" name="mdadm" arch="i586">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="380143d1878b6d05d88d4f816b97b15dc095004b55af4a0968ae420f37c17f2d" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="aaf0ded1e584903d2064398a622adeedc72c0693d5df555bfc964626694be2a0" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="03641bad44bfc0faf010634d98494b49e0b71162152e2949df3ba3476aa1ff56" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="c25e0c004a191733e606a24cb9a95dea3c5ac433084774e2e27ff6ea13e0c084" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="15.32.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (bsc#1180220))
  0112-Incremental-Remove-redundant-spare-movement-logic.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0113-super1-fix-Floating-point-exception.patch
  0114-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0115-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0116-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="258eff0cb884c234cf701419659ecae02044ad022f6e5b185b7b7f1523796503" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="0f0f77df9c2f599ebeb4435f9a41152760aa8d5329b4e1f586a390d399e9d05b" name="mdadm" arch="i586">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="613d1f3791ef87326f16625c3e39adc1453fe431eab304abfac18b5901d1935d" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="afda1b421fef5a7b7a016bd105a65deeacb45a60e63260659a5ac7ae91d0f8f3" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="fa3c85f2f0c88bca249ec85ca98ae5318650a49e55a99044a8938f81ca02acce" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="7aa740b596cb4e177827ac59746d4e042b67df3b802870a9170c81b75a74ad0a" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="24.3.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
</package>
<package pkgid="b94fc7faeaba70ab89d98d87f66ce1e43468c3e600fd7f1c6d1a6dc531f7b064" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="ba8867d51b940841140748ef6e5b46f02bac4b49abe299563f283026937a9aeb" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="f0ad647650b4ff56ffa9e89998702ce5c663fd891e262d3f98e9eee32d6fa78c" name="motif" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="c1955454c0ad056db0fc8906d47c9459624a5d5c011ec2228301baf56d316e68" name="motif" arch="i586">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="b190d6797245898c816596b6d2ae9d9094d6febb4502e5f1bf7590e90a9aad5e" name="motif" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="68634a309e18a49949d01bc47eb5df52673a9d7aecea222b22e2a076d302c709" name="motif" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="3e6a2074daff4ad6e6c836ea30cd3dfda9bd5d3b0783d2f28f005f52c756ced8" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="ebefc3a8c4b61def73f8916f4d95e5a2228c03018bfe516e74d6c7d94d077524" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="b3fa15b7f3e36a9c505f6e3bb78d7b52ef9eec93a8ac45d088da68d4df03fc9f" name="motif-devel" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="8f69ed3e5aa9ccba1d98e889ff53dec3960f10eb31e23e30eb2a5d798cded6a6" name="motif-devel" arch="i586">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="1523115da318c7682636d8a154790ef51edeb13c13dfbeab76131f636f517cd6" name="motif-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="a8d1dc1f4d01c4432dcafc78ca3ebd7f5cacbbd936d5ec5f1881f9e032190db1" name="motif-devel" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9beef97216494d371e7be2cd0953e8113e08a928e3c8caf79ae86748d453a0c0" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="57aac17782c34a03c5f2cf694e410f8d04936eaebd2151e4f566d71c315b12d6" name="motif-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9f21f4e4c30dc661cd995f2aeca957a7d08ef4f825942df820132a8d25cccb32" name="motif-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="2.3.4" rel="3.3.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="f28923766d0e443da68b64ad9b8c3483fb43ecff24f1fa8478348c2d4dc77afa" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="5d28d4698b219fc849ab58f57e4f5a9b148f9032ae371a60fc311e7e0d822136" name="mozilla-nss" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="45f57b1fd1b94c13cac0192a28197b6eabd033382626fb6e3572ce8d52613ead" name="mozilla-nss" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="1edcabe335932731abd9c0fb005fe983aa4b5fb88a6b8e578782403c73e9c994" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="4a37da1720c5d4cbcbf558b291e902c50c5f8a3fe7fe46cbc81d49f0036bf158" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7aa0de84bc6d6b030ce73bdfe6d3ab7c68da915cde9692912ce976e82bde3714" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="15ac257fa57de2855aaba75fc01c26d77690f9bf50e787471cf7a559916721ed" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="526f257ee00b7f67b910a0b6ae25268fe053b917612f9b279fb804702df951e2" name="mozilla-nss-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="66fc733fc7fd0a6735aab8fc007f507f500fe5d9a9a8e3867247d7e7971093bc" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="de3c7956503018af86517750c07a5dcde7f1e4b3e04debdb8b6405eaa49f0b72" name="mozilla-nss-certs" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="7de29c847a1d2cb8da4b892f36432129bf6b1dff5c181941e0eb4e60776cbc34" name="mozilla-nss-certs" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="a2348d5ebbcd69a96d9c5b9113f332b0d7f9ae66f2f03f4c7e9ee57459ab608f" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f7bb34649f3520f14226167de851aec1de3515099662967141999fd7805a6b4c" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="1f6f3953ff730ffb5c885369a78ca14e1ca688bcdca86d9449eefa2539c6a08f" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="e5589b8550cd4569b496948d683d538d808d5fa2f23735a6cdab09c297ce985f" name="mozilla-nss-certs-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="bc779c657a46d9d2bbe27c29d2deab0e4e503e7de754510e930ef7bcf0fddd7e" name="mozilla-nss-devel" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="54bbc8554eef55d1a7d957403683b1a45abf05399da1e19c76faf970e8d67a24" name="mozilla-nss-devel" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="f21ee829edc2c197a33d3de24b0be5d1ca0e9d49b398e8dfa0833b537f0b7897" name="mozilla-nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="b95a00e9bb0f4049ee789465fc6b397758c52b3191d4385f2ebe8c8f9da6442a" name="mozilla-nss-devel" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ed8c91c2a31c329b5c1385379c8b531bdba53e4efae7ee120f404cb661108fca" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="713861856f2df08ab4f65d40b291b59047e515aac6732fb4d843674b2e4b182e" name="mozilla-nss-sysinit" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3a2f272bbaca0d41eb28c0772b8afbf19f177b78ffc9a053257bd544ad07505d" name="mozilla-nss-sysinit" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="900ace588f547243c0c1eeeded5788915a513d6c43cf95b1d4f6908ca2c9fa66" name="mozilla-nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="bedf545489a5970d4fc457ee6d37738aa54b6101adfdbb2d4bdce2ac5d82b9ea" name="mozilla-nss-sysinit" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3d83ad991563d21ecfbba26901bf628b0fcf4d2e7e5155af1e80226621de990c" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="2f456e28de469928330c998f5eb31ac33913de310554774ab7f4056c90d38e0c" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="9b5ce75f6dc1dd55596a719ae1c4582ddffe5453d5f86ef8f4762dfdd8c1a511" name="mozilla-nss-sysinit-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="4d031e36d7b782e1ba3ba2afd10e9dab692e8f4ec692d655b78df9328ea78eb9" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="ea806ef230e5b2cb12018ef7fbd63f4475bc1d98ce38f74f1a3cab674d1a9c42" name="mozilla-nss-tools" arch="i586">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="1aa321e38156edc1dc01756bf9712e60df2d41cd05518e56b98de46574f68576" name="mozilla-nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="3ac78ff5ff158d81c080d6a8f7816ca9e99dc52c8dbe8a7eb26b31f5e65c2e9d" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="6dc9b87d8c64e42949421719e8ff550abc7002847dfae17c1bd31b7c3bd67e84" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.53.1" rel="3.53.1"/>
  <changelog author="hpj@suse.com" date="1587729600">- nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
  consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
  for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
  by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
  checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
  unconditional nssdbm checksumming with a dlopen(), so it can be
  located consistently and perform its own self-tests.</changelog>
  <changelog author="hpj@suse.com" date="1587902400">- nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
  new DSA and ECDSA hash-and-sign update functinos.</changelog>
  <changelog author="hpj@suse.com" date="1589889600">- nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
  of ENOENT when trying to access /proc/sys/crypto/fips_enabled
  (bsc#1170908).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1590494400">- update to NSS 3.52.1
  Notable changes
  * Update NSS to support PKCS#11 v3.0 (bmo#1603628)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from HACL*
    (bmo#1612493)
  * CVE-2020-12399 - Force a fixed length for DSA exponentiation
    (bmo#1631576, bsc#1171978)
- Set NSS_ENABLE_WERROR=0 in order to fix boo#1169746.
- update to NSS 3.52:
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
    Note: This change modifies the CK_GCM_PARAMS struct to include
    the ulIvBits field which, prior to PKCS #11 v3.0, was
    ambiguously defined and not included in the NSS definition.
    If an application is recompiled with NSS 3.52+, this field
    must be initialized to a value corresponding to ulIvLen.
    Alternatively, defining NSS_PKCS11_2_0_COMPAT will yield the
    old definition. See the bug for more information.
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly (bmo#1623374).
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL* (bmo#1612493).
  * Fix unused variable 'getauxval' error on iOS compilation.
    (bmo#1633498)
  * Add Softoken functions for FIPS. (bmo#1630721)
  * Fix problem of GYP MSVC builds not producing debug symbol files.
    (bmo#1630458)
  * Add IKEv1 Quick Mode KDF. (bmo#1629663)
  * MPConfig calls in SSL initialize policy before NSS is initialized.
    (bmo#1629661)
  * Support temporary session objects in ckfw. (bmo#1629655)
  * Add PKCS11 v3.0 functions to module debug logger. (bmo#1629105)
  * Fix error in generation of fuzz32 docker image after updates.
    (bmo#1626751)
  * Fix implicit declaration of function 'getopt' error. (bmo#1625133)
  * Allow building of gcm-arm32-neon on non-armv7 architectures.
    (bmo#1624864)
  * Fix compilation error in Firefox Android. (bmo#1624402)
  * Require CK_FUNCTION_LIST structs to be packed. (bmo#1624130)
  * Fix clang warning for unknown argument '-msse4'. (bmo#1624377)
  * Support new PKCS #11 v3.0 Message Interface for AES-GCM and
    ChaChaPoly. (bmo#1623374)
  * Fix freebl_cpuid for querying Extended Features. (bmo#1623184)
  * Fix argument parsing in lowhashtest. (bmo#1622555)
  * Introduce NSS_DISABLE_GCM_ARM32_NEON to build on arm32 without
    NEON support. (bmo#1620799)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions. (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore. (bmo#1619056)
  * Fix UBSAN issue in ssl_ParseSessionTicket. (bmo#1618915)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket.
    (bmo#1618739)
  * Update Delegated Credentials implementation to draft-07.
    (bmo#1617968)
  * Update HACL* dependencies for libintvector.h (bmo#1617533)
  * Add vector accelerated SHA2 for POWER 8+. (bmo#1613238)
  * Integrate AVX2 ChaCha20, Poly1305, and ChaCha20Poly1305 from
    HACL*. (bmo#1612493)
  * Maintain PKCS11 C_GetAttributeValue semantics on attributes that
    lack NSS database columns. (bmo#1612281)
  * Add Wycheproof RSA test vectors. (bmo#1612260)
  * broken fipstest handling of KI_len. (bmo#1608250)
  * Consistently handle NULL slot/session. (bmo#1608245)
  * Avoid dcache pollution from sdb_measureAccess(). (bmo#1603801)
  * Update NSS to support PKCS #11 v3.0. (bmo#1603628)
  * TLS 1.3 does not work in FIPS mode. (bmo#1561637)
  * Fix overzealous assertion when evicting a cached sessionID or
    using external cache. (bmo#1531906)
  * Fix issue where testlib makefile build produced extraneous object
    files. (bmo#1465613)
  * Properly handle multi-block SEED ECB inputs. (bmo#1619959)
  * Guard all instances of NSSCMSSignedData.signerInfo to avoid a CMS
    crash (bmo#1630925)
  * Name Constraints validation: CN treated as DNS name even when
    syntactically invalid as DNS name (bmo#1571677)
- update to NSS 3.51.1:
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
  * Add workaround option to include both DTLS and TLS versions in
    DTLS supported_versions (bmo#1619102)
  * Update README: TLS 1.3 is not experimental anymore
    (bmo#1619056)
  * Don't assert fuzzer behavior in SSL_ParseSessionTicket
    (bmo#1618739)
  * Fix UBSAN issue in ssl_ParseSessionTicket (bmo#1618915)
  * Consistently handle NULL slot/session (bmo#1608245)
  * broken fipstest handling of KI_len (bmo#1608250)
  * Update Delegated Credentials implementation to draft-07
    (bmo#1617968)
- Add patch nss-kremlin-ppc64le.patch to fix ppc and s390x builds
- update to NSS 3.51
  * Updated DTLS 1.3 implementation to Draft-34. (bmo#1608892)
  * Correct swapped PKCS11 values of CKM_AES_CMAC and
    CKM_AES_CMAC_GENERAL (bmo#1611209)
  * Complete integration of Wycheproof ECDH test cases (bmo#1612259)
  * Check if PPC __has_include(&lt;sys/auxv.h&gt;) (bmo#1614183)
  * Fix a compilation error for ?getFIPSEnv? "defined but not used"
    (bmo#1614786)
  * Send DTLS version numbers in DTLS 1.3 supported_versions extension
    to avoid an incompatibility. (bmo#1615208)
  * SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
    to be null-terminated (bmo#1538980)
  * Correct a warning for comparison of integers of different signs:
    'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
    (bmo#1561337)
  * Add test for mp_int clamping (bmo#1609751)
  * Don't attempt to read the fips_enabled flag on the machine unless
    NSS was built with FIPS enabled (bmo#1582169)
  * Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
  * Fix compiler warning in secsign.c (bmo#1617387)
  * Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
    (bmo#1618400)
  * Fix a crash on unaligned CMACContext.aes.keySchedule when using
    AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
  * Verified primitives from HACL* were updated, bringing performance
    improvements for several platforms.
    Note that Intel processors with SSE4 but without AVX are currently
    unable to use the improved ChaCha20/Poly1305 due to a build issue;
    such platforms will fall-back to less optimized algorithms.
    See bmo#1609569 for details
  * Updated DTLS 1.3 implementation to Draft-30.
    See bmo#1599514 for details.
  * Added NIST SP800-108 KBKDF - PKCS#11 implementation.
    See bmo#1599603 for details.
  * Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
  Fixed bugs:
  * Fix compilation problems with NEON-specific code in freebl
    (bmo#1608327)
  * Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
  3.49.1
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
  * Cache the most recent PBKDF2 password hash, to speed up repeated
    SDR operations, important with the increased KDF iteration counts (bmo#1606992)
  3.49
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
  * The legacy DBM database, libnssdbm, is no longer built by default
    when using gyp builds (bmo#1594933)
  * several bugfixes
- update to NSS 3.48
  https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
  Notable Changes
  * TLS 1.3 is the default maximum TLS version (bmo#1573118)
  * TLS extended master secret is enabled by default, where possible
    (bmo#1575411)
  * The master password PBE now uses 10,000 iterations by default when
    using the default sql (key4.db) storage (bmo#1562671)
  Certificate Authority Changes
  * Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
  Bugfixes
- requires NSPR 4.24</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1591099200">- update to NSS 3.53
  Notable changes:
  * When using the Makefiles, NSS can be built in parallel, speeding up
    those builds to more similar performance as the build.sh/ninja/gyp
    system. (bmo#290526)
  * SEED is now moved into a new freebl directory
    freebl/deprecated (Bug 1636389). SEED will be disabled by default in
    a future release of NSS. At that time, users will need to set the
    compile-time flag (bmo#1622033) to disable that deprecation in order
    to use the algorithm.
    Algorithms marked as deprecated will ultimately
    be removed.
  * Several root certificates in the Mozilla program now set
    the CKA_NSS_SERVER_DISTRUST_AFTER attribute, which NSS consumers can
    query to further refine trust decisions. (bmo#1618404, bmo#1621159)
    If a builtin certificate has a CKA_NSS_SERVER_DISTRUST_AFTER timestamp
    before the  SCT or NotBefore date of a certificate that builtin
    issued, then clients can elect not to trust it. This attribute
    provides a more graceful phase-out for certificate authorities than
    complete removal from the root certificate builtin store.
  Bugs fixed
  * Initialize PBE params (ASAN fix) (bmo#1640260)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Symantec root certs
    (bmo#1618404)
  * Set CKA_NSS_SERVER_DISTRUST_AFTER for Consorci AOC, GRCA, and SK ID
    root certs (bmo#1621159)
  * PPC64: Correct compilation error between VMX vs. VSX vector
    instructions (bmo#1629414)
  * Fix various compile warnings in NSS (bmo#1639033)
  * Fix a null pointer in security/nss/lib/ssl/sslencode.c:67
    (bmo#1640041)
  * Fix a null pointer in security/nss/lib/ssl/sslsock.c:4460
    (bmo#1640042)
  * Avoid multiple definitions of SHA{256,384,512}_* symbols when linking
    libfreeblpriv3.so in Firefox on ppc64le (bmo#1638289)
  * Relocate deprecated SEED algorithm (bmo#1636389)
  * lib/ckfw: No such file or directory. Stop. (bmo#1637083)
  * Additional modular inverse test (bmo#1561331)
  * Rework and cleanup gmake builds (bmo#1629553)
  * Remove mkdepend and "depend" make target (bmo#1438431)
  * Support parallel building of NSS when using the Makefiles (bmo#290526)
  * HACL* update after changes in libintvector.h (bmo#1636206)
  * Fix building NSS on Debian s390x, mips64el, and riscv64 (bmo#1636058)
  * Add option to build without SEED (bmo#1622033)
- Remove upstreamed patches nss-kremlin-ppc64le.patch
  and nss-unit-test-fixes.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592395200">- update to NSS 3.53.1
  * CVE-2020-12402 - Use constant-time GCD and modular inversion
    in MPI (bmo#1631597, bsc#1173032)</changelog>
  <changelog author="hpj@suse.com" date="1593086400">- Add nss-fips-fix-missing-nspr.patch (bsc#1168669).</changelog>
  <changelog author="hpj@suse.com" date="1593432000">- Expand nss-fips-fix-missing-nspr.patch to avoid spurious
  initialization attempt of global RNG (bsc#1168669).</changelog>
  <changelog author="cgrobertson@suse.com" date="1597147200">- Fix for Firefox failing in fips mode (bsc#1174697)
  Updated and rebased patch nss-fips-constructor-self-tests.patch
  Rebased patches:
    add-relro-linker-option.patch
    malloc.patch
    nss-fips-constructor-self-tests.patch
    nss-fips-fix-missing-nspr.patch
    nss-fix-dh-pkcs-derive-inverted-logic.patch
    nss-opt.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1599739200">- Modifications for NIST SP 800-56Ar3 compliance. This adds checks
  and restricts Diffie-Hellman parameters in FIPS mode
  (bsc#1176173).
  New patches:
  * nss-fips-stricter-dh.patch
  * nss-fips-kdf-self-tests.patch</changelog>
</package>
<package pkgid="24c4512417f0cb673517632cb1079fb98029a7476f3ee4dd5b6c665bc33c85b5" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="dbea2a875c7f7a853a39858c3f6a7d7c50d271fddd782e2bb2f087a314b8bd08" name="multipath-tools" arch="i586">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="e8c87b96c386593c4d3633f777eea49d55512c80184081e13fa31bd6bf24d92b" name="multipath-tools" arch="ppc64le">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="a2f7a22e097cde9b5723db02919b82b1ceffa1918e92274c410907ffe0cfd59f" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="aa536f1945d09045e691b6aa9097295e7c9fc2da2eed49b4edcc58c27a263c67" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="53836dc3e6eafa78e7c20de109f3fd9ee14d40f318b76d4e17b0ebb6c7ba2e63" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="c0ca67e0001212f57c7564800193f8100402c100a7d63c4d93733372b9c3673f" name="multipath-tools-devel" arch="aarch64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="955d74e437f2ac530faf3ede969bc6fa4126ae81f56e694b2ef9395007fcc8fe" name="multipath-tools-devel" arch="i586">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="47f07921d2d864e4abb21ce0afa111858148c90b3c8afd0ce7717107b95e20a2" name="multipath-tools-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="df1d1d429a2485f4b793fc11ebaa1fc55d82243cb69d79417764fc7579774aa2" name="multipath-tools-devel" arch="s390x">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="b88aa991f623cbfee5bbc10c690eba453d8e0b5b9103fb8e4761612b47a855f2" name="multipath-tools-devel" arch="x86_64">
  <version epoch="0" ver="0.8.2+166.7501a27" rel="4.9.1"/>
  <changelog author="mwilck@suse.com" date="1566388800">- Set default for "enable_foreign" to "NONE" (bsc#1139837)
  * added libmultipath-set-enable_foreign-to-NONE-by-default.patch</changelog>
  <changelog author="mwilck@suse.com" date="1567080000">- Update to version 0.8.2+17+suse.21ac578:
  * kpartx: recognize DASD on loop devices again (bsc#1139775)
  * Pull in SLE15-SP1 patches yet missing upstream
- Update to upstream version 0.8.2 (bsc#1148767)
  * libmultipath: more cautious blacklisting by missing property
    (don't blacklist paths because of temporarily missing
    udev properties)
  * code correctness fixes from coverity and gcc9 warnings
  * fixes for VPD80/83 parsing
- Update to upstream version 0.8.1 (bsc#1148767)
  * Improve handling of changed WWIDs and temporary failure
  to obtain WWID. Option "disable_changed_wwids" is now ignored.
  (bsc#1184260)
  * Fixes for PATH_PENDING state handling (bsc#1125043)
  * libmutipath: continue to use old state on PATH_PENDING
  * libmultipath: disable user_friendly_names for NetApp
  * various fixes for marginal path code
- Update to upstream version 0.8.0 (bsc#1148767)
  * multipathd: fix pp-&gt;initialized state ping-ponging
  * multipath: blacklist zram devices</changelog>
  <changelog author="mwilck@suse.com" date="1567771200">- Update to version 0.8.2+18.9ff73e7:
  * Fix premature path reinstantiation with san_path_err_XX
    (boo#1149319)</changelog>
  <changelog author="mwilck@suse.com" date="1591617600">- Remove 0%{?is_opensuse} from spec file (jsc#SLE-11854)
- Fix udev rule processing during coldplug (bsc#1172157)
  * Add patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1593604800">- Update to version 0.8.2+23.4b86d66:
- Fix handling of incompletely initialized udev devices (bsc#1172157)
- Remove ineffective patch for bsc#1172157
  * Del patch: 11-dm-mpath.rules-Fix-udev-rule-processing-during-co.patch</changelog>
  <changelog author="mwilck@suse.com" date="1600344000">- Update to version 0.8.2+140.5146cae
  * drop nr_active field, always count active paths (bsc#1125043)
  * kpartx.rules: fix handling of synthetic uevents (bsc#1161923)
  * libmpathpersist: limit PRIN allocation length to 8192 bytes
  (bsc#1165786)
  * avoid data corruption caused by duplicate alias in bindings file
    (bsc#1172429)
  * improve logging for failure to set dev_loss_tmo (bsc#1173060, bsc#1173064)
  * Fix handling of hardware properties for maps without paths
  (bsc#1176644)
  * Added hwtable entry for ETERNUS AHB (bsc#1174026)
- Backported upstream fixes (bsc#1176670):
  * multipath: add "-e" option to enable foreign libraries (bsc#1139837)
  * multipath-tools: add HPE MSA 1060/2060 to hwtable
  * ALUA support for PURE FlashArray
  * libmultipath: EMC PowerMax NVMe device config
  * libmultipath: pathinfo(): don't filter emtpy devnode names
  * libmultipath: fix ALUA autodetection when paths are down
  * libmultipath: fix (max_)polling_interval setting logic
  * libmultipath: count pending paths as active on loads
  * multipathd: disable queueing for recreated map in uev_remove_map
  * multipathd: fix check_path errors with removed map
  * multipathd: add new paths under vecs lock
  * multipath: deal with delegation failures correctly
  * Added memory leak testing and fixed various leaks
  * Various minor fixes, code correctness improvements
- Dropped upstream merged patch:
  * Drop patch: libmultipath-set-enable_foreign-to-NONE-by-default.patch
- Added README.alua
- Added %check section in spec file
- Modernized BuildRequires</changelog>
  <changelog author="mwilck@suse.com" date="1604318400">- Avoid reading files extensions other than ".conf" from config dir
  (bsc#1162896; added this note retroactively, it was already solved in
  multipath-tools-0.8.2+140.5146cae).
- Fix wrong usage of "%service_del_preun -n" in spec file (bsc#1178354)</changelog>
  <changelog author="mwilck@suse.com" date="1607947200">- Update to version 0.8.2+142.7ae58f6:
  * libmultipath: force map reload if udev incomplete (bsc#1178662)
  * kpartx: fix detection of dasd partition tables on loop devices
    (bsc#1139775)</changelog>
  <changelog author="mwilck@suse.com" date="1610107200">- Update to version 0.8.2+143.f1a195c:
  * fix issues with SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * cleanup uevent generation on startup (bsc#1178662, bsc#1172157,
    bsc#1175454, bsc#1176406)
  * Avoid access to root FS while queueing IO (bsc#1178049,
    bsc#1181234)</changelog>
  <changelog author="mwilck@suse.com" date="1621339200">- Update to version 0.8.2+166.7501a27:
  * enable negated regular expression syntax in conf file
    (bsc#1182917)
  * change default devnode blacklist to
    '!^(sd[a-z]|dasd[a-z]|nvme[0-9])'
  * fixes for SAS expanders (bsc#1178377, bsc#1178379, bsc#1177081)
  * Avoid "illegal request" errors on non-RDAC storage
    (bsc#bsc#1182072, bsc#1177371)
  * kpartx: free loop device after listing partitions (boo#1107187)</changelog>
</package>
<package pkgid="8106703f1ccb226c827d605a8bd58f08fd8139f7957852a86e330ccbd18994a1" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="2f5348a85b2003b796ff2fa8aa1c1a4596f8d5067452527d08ff779798e4d7d4" name="nfs-client" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="4aa603ce26f456cdb251fd3af81f911d5ec7a011436a18f6c172e10cccf92f67" name="nfs-client" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="596094cb14362e7acd8d03e05d808ea0650dd6ac712e73836f064c37bd4f4318" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="1a38f2615ad823a8dd8ffb1ea375e697be23b940614cd478e03cceabd89790a7" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="4e0850ce0b4ac6ff1415cd28bffac9596517c357d4cf086358863458630987b9" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="001e9ee38440db3c9811cb5f8223f071956f21831bef7d697e508039e465a650" name="nfs-client" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="e3e4aed8dadfdc4295f8ab03c04a2062883f6f584e981600617c946bf7797db9" name="nfs-client" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="a6ba59759ed2f832b3e9e1ae2d28953dd68ead002625ac153c7d6069a1d8e383" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="03108e6a149eb4e26fccb1191a4bec19cc2b525b690b85e9683232b8806b30a2" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="bbed3681f5409929ce8babd9e990ea0222b92b78a99385dc4fe8d9ab4fad98c2" name="nfs-doc" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="dd65bde72af31366f2ebf3e1a535b848a87e734cdac1a2d6eaddf306e1eba079" name="nfs-doc" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="2ca06c904b76cacf753bf24d9f43e6408d3f39170c4a8fd3babb2bc9e9a81c36" name="nfs-doc" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="9c74d054a0c16f54abbe0bb7c35922c97a5eec344fae1812bee1a7c3ea7c9156" name="nfs-doc" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="c0a826b29b8f2af5cd8f5c40e1d48066f3a0e5e9931c5602a46d72c0e59f987a" name="nfs-doc" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="c0b08d843c860b9de7f7f8b861e644cb8481f686b6412369bafcc6f5993d83c6" name="nfs-doc" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="1de029684f92d3394648dae45c1593101cc6bf8cd43c0f8346578995b698fc6c" name="nfs-doc" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="8e0e881b1639525902c1fe7c673cd58aeeabc4cf483658a51f7c6074fe736ae0" name="nfs-doc" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="d96ed145f5da268699a3d1102b4c41334612187663bce8e6f6bfeafc7ce6f25f" name="nfs-doc" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="bf1e6459b436c2ca9d593a4981b295b1f631684d8cfde2c19f8de0ce3af6e880" name="nfs-doc" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="ebd36c5200a55084d141ba9f6a8fb6c1c92621fc64de9f2e90f1bc49c9bd0614" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="a95924e3e5d958886fc929c5fa3eee197b1fbb1ca813fca248a07544b2da54e5" name="nfs-kernel-server" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="fefd57c15ad273375cfcbb2f46065e03053f75bb29e68a422647dbe0345efbd2" name="nfs-kernel-server" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="e67f385a196e8cb0ad23863fdb45e09b5facbb7a81f909152eaec876033e0fa1" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="129aaca76445e9c9a6ce3a94055b6075391c250922af949c44123e81a94965a7" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="3cb14ead0b9c1bd0a42a58fb4cc5ae3029ae72b46e3e752970f6aea0bc6b376f" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="58b6b276fb04541b9d704eea3e1f54082a9352e34fc11ef57763ec48f442acd7" name="nfs-kernel-server" arch="i586">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="f900e39d7e88bc1a88f6059c97e48bd307875c63de54916b97033f9cc6357541" name="nfs-kernel-server" arch="ppc64le">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="9aa7c0bc960f7195036a2a7fafe141a9ff0d1691c3c81b4e8c4c9e1875a20118" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="d233c313a28b8e31dd8b82da06aabd7d1fa2113366cf40226175cefb544d74c0" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="f179ba57f1e1d3ede654f5db5c21964f0d5b934ca2e881af8a8bbf8f8be038c3" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="10.15.1"/>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
</package>
<package pkgid="4ec7a76f3574cd26be04c98554e0c258502fce15503991472d657ffc7f7a0d25" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="10.18.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
</package>
<package pkgid="b12b688fd5a9b36667a58df2087709b0308cd0dd516df62219417c16a333cd98" name="nghttp2" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="b0c6f811d2c4dfcca17ede11e91d2f74d4c3dd1c14ea54e51288c2005f7a6c43" name="nghttp2" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="0f74406909f066c37da1aca3b5ca8d9be9de31e38e0877bf72bae8f9c623f638" name="nghttp2" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="3a2fc054bf204dcc6e328a6d33b51db8d37fe7032f3d6ebe81dac9d0ba94260e" name="nghttp2" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2db559ec20984a55ca1eceaf7059066cb1877973ceae3ab4e9081b776e4ebb9b" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="d1e648e636f675c222e84fb21f01f7065f1472a5aeb8bd47445e25a8ada6d0e6" name="nghttp2" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="1972f710dbab6461c6f7e17d89444bc9689b8630b1f7adf4c37146f589b7a437" name="nghttp2-python" arch="src">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="167a995bbc670875504f5c33934a32e8eac6fd8f7bab2b3dff5442b1847b9d8d" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="9bb3358b40817748e2998d99dc323b69eba12a15a545bc30f0a226df48412ef5" name="nginx" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="4270dd6431986019e7d4443c44a9c515be1d037b89975fe0f745862666f1f869" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="59e07bc0774b1cebfa76d82787cc50a50e28ec26ce1c3f0068a61c20e9b91fdf" name="nginx" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="11ba77a5648c8c30de3ee8698ddc03b97ecde70f01a9411d1d5fbac6c75adffb" name="nginx" arch="src">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="6944dba8ad4668bf6dedda29cd3ad37483826e056391db1ebc5acb6a2e5b0cd5" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="47a8ddc7a84dc2e9c2e390de8697d18d2de163a38f3340c255e5b27877ccb10f" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="4ca55d890a745593fd35fd84e1cf2e5bda32eab03a3799498b8f83e9df8dc000" name="nginx" arch="i586">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="af8b62f359dc2b289171dec3e17779244a2d3790f90b951b368ddd03c3a870ed" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="2a46d135309d383f860978f03a4125d812fa8d34a486f672a2e73856f2e7e441" name="nginx" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="4327adc53c7086fc8eb07abaa1cb614602971c6bbf5fd072214fcd59ef31967e" name="nginx" arch="src">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="d92ae9ebc10c7690f69cf4c56eba2aa64a0ebb643fb49130f58e7c2bb3f57073" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e8aa288a5c37a335d41ff831f759cad281677d9ee6ea4554c5f12cd268240812" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="d8224fc3100b7a1f35f4b532751ceca93c6c7c0bc18dbc4fec2dc0646404544f" name="nginx" arch="i586">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="9cc2fe3b0286092a625aaef00d9c5bed3afb30140487c2cc1ef64a0c460a2443" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="1a9216509e22497b76336d2f1ac01da8a1ffacf269eb388d2cfb4245cd86da44" name="nginx" arch="s390x">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="cde0ca2579cb431c5d9d371a332cb07d2a849446fce3cbcd8869903a7924e202" name="nginx" arch="src">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e0c58640609ad6cbc32efe07c1f5935adeb6e4514a5e3383fe3215dd433e789b" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="e19207ef3b5cf98945544b8fadc4488f4754f171cce1bc06ec2de5021e9b75b4" name="nginx" arch="aarch64">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="43ad465d41057175b92005188493ec75720fa338301ea9b8143b938b3435d42e" name="nginx" arch="i586">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="fd00683d03c02b013a7e6f64522f64ddf85724736f594c24ec118c7cfa484b00" name="nginx" arch="ppc64le">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="c468cd6d1df954c1d91b0467ab2bd5977f5d6dea2f31a0c06e52648fff63ff7c" name="nginx" arch="s390x">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="371c716726c1b2ab1c3acfb209828a5a5e5c1cd97809c3c066f2429ea7825cdb" name="nginx" arch="src">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="8a42ada87e35ebf59ca6dcd1b633b0c8fe95f5f782b915515e0189623a3f4f0e" name="nginx" arch="x86_64">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="29ebe4dff6be042e9b5e33b3ed8b01652e83782da927db66ed10e5eb07c80c35" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.15.1"/>
  <changelog author="mrueckert@suse.de" date="1519214400">- update headers more to 0.33
  - feature: add wildcard match support for
    more_clear_input_headers.</changelog>
  <changelog author="mrueckert@suse.de" date="1519214401">- update rmtp module to 1.2.1
  - just commenting all places where we fallthrough conditionals</changelog>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
  (bsc#1160682).
  Added CVE-2019-20372.patch</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="f7183a5588ab47c69c1dbdd0b70b71eb4ef3ded8073c8d7baded65fea7d5a3da" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.3.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="65417d3c141262ce92967b2b11804a7a72a01aa88f3e9d48d730d98f2561366c" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="6.13.1"/>
  <changelog author="achernikov@suse.com" date="1522238400">- Recommend to use TLSv1.2 by default (boo#1086855)</changelog>
  <changelog author="astieger@suse.com" date="1523361600">- update to 1.13.11:
  * the "proxy_protocol" parameter of the "listen" directive now
    supports the PROXY protocol version 2
  * bugfix in the "http_404", "http_500", etc. parameters of the
    "proxy_next_upstream" directive
- includes changes from 1.13.10:
  * the "set" parameter of the "include" SSI directive now allows
    writing arbitrary responses to a variable; the
    "subrequest_output_buffer_size" directive defines maximum
    response size
  * now nginx uses clock_gettime(CLOCK_MONOTONIC) if available, to
    avoid timeouts being incorrectly triggered on system time changes
  * add the "escape=none" parameter of the "log_format" directive
  * add the $ssl_preread_alpn_protocols variable in the
    ngx_stream_ssl_preread_module.
  * add the ngx_http_grpc_module.
  * fix memory allocation error handling in the "geo" directive.
  * when using variables in the "auth_basic_user_file" directive
    a null character may have appeared in logs
- Use %license (bsc#1082318)</changelog>
  <changelog author="achernikov@suse.com" date="1525694400">- update to 1.14.0
  * 1.14.x stable branch.
- includes changes from 1.13.12
  * bugfix connections with gRPC backends might be closed unexpectedly
  when returning a large response.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1526385600">- Do not require insserv on systemd-only releases.</changelog>
  <changelog author="mrostecki@suse.com" date="1527249600">- Add nginx-source package</changelog>
  <changelog author="achernikov@suse.com" date="1549368000">- Changes with nginx 1.14.2
  - Bugfix: nginx could not be built by gcc 8.1.
  - Bugfix: nginx could not be built on Fedora 28 Linux.
  - Bugfix: in handling of client addresses when using unix domain
    listen sockets to work with datagrams on Linux.
  - Change: the logging level of the "http request", "https proxy
    request", "unsupported protocol", "version too low",
    "no suitable key share", and "no suitable signature algorithm"
    SSL errors has been lowered from "crit" to "info".
  - Bugfix: when using OpenSSL 1.1.0 or newer it was not possible
    to switch off "ssl_prefer_server_ciphers" in a virtual server
    if it was switched on in the default server.
  - Bugfix: nginx could not be built with LibreSSL 2.8.0.
  - Bugfix: if nginx was built with OpenSSL 1.1.0 and used with
    OpenSSL 1.1.1, the TLS 1.3 protocol was always enabled.
  - Bugfix: sending a disk-buffered request body to a gRPC backend
    might fail.
  - Bugfix: connections with some gRPC backends might not be cached when
    using the "keepalive" directive.
  - Bugfix: a segmentation fault might occur in a worker process if the
    ngx_http_mp4_module was used on 32-bit platforms.
- Changes with nginx 1.14.1
  - Security: when using HTTP/2 a client might cause excessive memory
    consumption (CVE-2018-16843 bsc#1115022) and CPU usage (CVE-2018-16844 bsc#1115025).
  - Security: processing of a specially crafted mp4 file with the
    ngx_http_mp4_module might result in worker process memory disclosure
    (CVE-2018-16845 bsc#1115015).
  - Bugfix: working with gRPC backends might result in excessive memory
    consumption.</changelog>
  <changelog author="rfrohl@suse.com" date="1567080000">- Fix HTTP/2 related security issues:
  - CVE-2019-9511: Fixed a denial of service by manipulating the window size and
    stream prioritization (bsc#1145579 CVE-2019-9511.patch).
  - CVE-2019-9513: Fixed a denial of service caused by resource loops (bsc#1145580 CVE-2019-9513.patch).
  - CVE-2019-9516: Fixed a denial of service caused by header leaks (bsc#1145582 CVE-2019-9516.patch)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1580385600">-- CVE-2019-20372: Fixed an HTTP request smuggling with certain error_page
  configurations which could have allowed unauthorized web page reads
-  (bsc#1160682).
  Added CVE-2019-20372.patch
-</changelog>
  <changelog author="vcizek@suse.com" date="1585051200">- Update to stable branch 1.16.1 (jsc#ECO-1401)
  * add TLS 1.3 support for SLE-15-SP2 (jsc#SLE-9295, bsc#1150711)
- Replace obsolete GeoIP module with MaxMinDB-based GeoIP2
  (jsc#SLE-11184, bsc#1156202)
- Start nginx after network is online (boo#1155690)
- Drop upstream patches:
  * CVE-2019-9511.patch
  * CVE-2019-9513.patch
  * CVE-2019-9516.patch
  * CVE-2019-20372.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1621944000">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="ecdacc02897547e8551490ccd032ac5611202b0cf301febf9c158bacfe8cd81d" name="nginx-source" arch="noarch">
  <version epoch="0" ver="1.19.8" rel="3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1601640000">- Use the ngx_* macros from the nginx-macros package to simplify
  the spec file.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1603800000">- Update to 1.19.4
  * https://nginx.org/en/CHANGES
  * Add the "ssl_conf_command", "proxy_ssl_conf_command",
    "grpc_ssl_conf_command", and "uwsgi_ssl_conf_command" directives.
  * Add the "ssl_reject_handshake" directive.
  * Add the "proxy_smtp_auth" directive in mail proxy.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1604923200">- Refresh spec-file via spec-cleaner and manual optimizations.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1606219200">- Update to 1.19.5
  * https://nginx.org/en/CHANGES
  * Add the -e switch.
  * The same source files can now be specified in different modules
    while building addon modules.
  * Fix SSL shutdown did not work when lingering close was used.
  * Fix "upstream sent frame for closed stream" errors might occur
    when working with gRPC backends.
  * Fix in request body filters internal API.</changelog>
  <changelog author="info@paolostivanin.com" date="1608724800">- Update to 1.19.6
  * https://nginx.org/en/CHANGES
  * Fix "no live upstreams" errors if a "server" inside "upstream"
    block was marked as "down".
  * Fix a segmentation fault might occur in a worker process if HTTPS
    was used; the bug had appeared in 1.19.5.
  * Fix nginx returned the 400 response on requests like
    "GET http://example.com?args HTTP/1.0".
  * Fix in the ngx_http_flv_module and ngx_http_mp4_module.</changelog>
  <changelog author="mrueckert@suse.de" date="1613476800">- Update to 1.19.7
  * https://nginx.org/en/CHANGES
  * Change: connections handling in HTTP/2 has been changed to
    better match HTTP/1.x; the "http2_recv_timeout",
    "http2_idle_timeout", and "http2_max_requests" directives have
    been removed, the "keepalive_timeout" and "keepalive_requests"
    directives should be used instead.
  * Change: the "http2_max_field_size" and "http2_max_header_size"
    directives have been removed, the "large_client_header_buffers"
    directive should be used instead.
  * Feature: now, if free worker connections are exhausted, nginx
    starts closing not only keepalive connections, but also
    connections in lingering close.
  * Bugfix: "zero size buf in output" alerts might appear in logs
    if an upstream server returned an incorrect response during
    unbuffered proxying; the bug had appeared in 1.19.1.
  * Bugfix: HEAD requests were handled incorrectly if the "return"
    directive was used with the "image_filter" or "xslt_stylesheet"
    directives.
  * Bugfix: in the "add_trailer" directive.
- Since we only target sle 12 and above we can skip all
  conditionals which apply to suse_version before 1315
  With changes in nginx itself we will drop support for sysvinit.
  http2, libatomic support and pcre_jit will always be on now.
  and we build all binaries with PIE now.
- Moved the last 2 path macros from nginx.spec to the macros file.
  (pid and lock path)</changelog>
  <changelog author="mrueckert@suse.de" date="1613563200">- Drop nginx_upstream_check module, there is no support for dynamic
  loading upstream and the module seems kind of unmaintained.
- Removed patch check_1.9.2+.patch.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1614427200">- Refreshed spec-file via spec-cleaner and manual optimizations.
  * Droped obsolete conditional constructs.
  * Removed pkg_name macro.</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- update to 1.19.8:
  * Feature: flags in the "proxy_cookie_flags" directive can now contain
    variables.
  * Feature: the "proxy_protocol" parameter of the "listen" directive,
    the "proxy_protocol" and "set_real_ip_from" directives in mail proxy.
  * Bugfix: HTTP/2 connections were immediately closed when using
    "keepalive_timeout 0"; the bug had appeared in 1.19.7.
  * Bugfix: some errors were logged as unknown if nginx was built with
    glibc 2.32.
  * Bugfix: in the eventport method.</changelog>
  <changelog author="fschnizlein@suse.com" date="1622030400">- CVE-2021-23017: Fixes nginx DNS resolver off-by-one heap write, allowing
  network attacker capable of providing DNS responses to a nginx server to
  achieve remote code execution. (bsc#1186126)</changelog>
</package>
<package pkgid="fb35df3fb90c4377e5cda02016929c6a42cfacc0436aa60343cc28de81a311b9" name="numactl" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="11d67bef0fdb4565abceeb93b6c6458aaa23e5c5e5e1361d69903fa5e1c62472" name="numactl" arch="i586">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="f2af6cc36e59fb683c72a9e22ba5c5dda1c5a6bedbd4f3dfc0d981c9ae88c95d" name="numactl" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="a09bf50e216fc29509042c76a28491f3c4d7a09ee103ce0e6d88dddfe3820d21" name="numactl" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="40bee2e1430727e68c70992bedf2d7afb43eb7cf373cba6a81959eda2bf479cb" name="numactl" arch="src">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="8ec21360a9e088c341b0a830dbb87419d17ede28e0a3fd261d10f26dd537a381" name="numactl" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="7.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1515153600">- Disable building at 32-bit ARM.
  NUMA is not supported by 32-bit ARM Linux Kernel, so build failed
  with
  [#]error "Add syscalls for your architecture or update kernel headers"</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for major/minor (bsc#1181571) (bsc#1183796)</changelog>
  <changelog author="egotthold@suse.com" date="1541592000">- Update to version 2.0.12:
  * Release numactl 2.0.12
  * Cleanup whitespace from *.c and *.h files
  * Add Travis build status to numactl README
  * Convert README and INSTALL to Markdown
  * Remove `threadtest.c`
  * Remove `mkolddemo` script
  * Remove file TODO, which has outdated contents
  * Remove file DESIGN, which has no contents
  * Remove changelogs from the repository
  * Revert "make clearcache work on x86/PIC"
  * Add "NAME" section to numastat manpage
  * Allow building on ARM systems
  * Add pkg-config file for NUMA library
  * readdir_r(3) is deprecated, use readdir(3) instead
  * Avoid filename truncation in numastat
  * fix coding style in last change
  * Fix: numademo test between sparse nodes
  * Fix: allocation of dynamic array
  * Fix: numactl distance between sparse nodes
  * include sys/sysmacros.h for major/minor
  * make clearcache work on x86/PIC
  * Fix regress test for invalid hard code of nodenames
  * Fix end of line check in distance parsing
  * Optimize numa_distance check
  * affinity: Include sys/sysmacros.h to fix warning
  * numademo: Increase buffer to avoid theoretical buffer overflow
  * Check for invalid nodes in numa_distance</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133098).</changelog>
  <changelog author="trenn@suse.de" date="1557921600">- For obs regression checker, this version includes following SLE
  fixes:
  - enable build for aarch64 (fate#319973) (bsc#976199)
    factory has an extra patch to disable ARM 32 bit archs which
    looks a bit misleading as %arm macro only covers 32 bit ARM.
  - Bug 955334 - numactl/libnuma: add patch for Dynamic Reconfiguration
    bsc#955334</changelog>
  <changelog author="kukuk@suse.de" date="1568116800">- numastat doesn't need perl anymore since 2012</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578744000">- Update to version 2.0.13:
  * Release numactl 2.0.13
  * Skip `test/move_pages` if we don't have at least two nodes available
  * Add license files: GPLv2 + LGPLv2.1
  * Handle cpu-less node for bind_range test
  * Convert numastat.c to standard numactl coding style
  * Disable clang travis targets for now
  * numastat.8: clarify that information relates to resident pages
  * Fix all declarations to be C prototypes
  * numatopology: Add check for cpu-less nodes
  * Update INSTALL.md
  * numastat: when reading no-exist pid, return EXIT_FAILURE
  * numastat: Add KReclaimable to list of known fields in meminfo
  * numastat: Better diagnostic when find unknown string in meminfo
  * Enable building on s390x
  * Correct sysconf constants
  * Removed unnecessary exit from memhog.c Solves issue #50
  * Synchronized usage function with man page
  * Added memhog.8 to Makefile.am
  * memhog: add man page
  * Allow linking with lld by deduplicating symbols
  * numademo: free the node_to_use on the way out
  * numademo: free test nodemask
  * libnuma: cleanup node cpu mask in destructor
  * numactl: add va_end to usage function
  * travis: add build matrix
  * remove kernel version check
  * add missing linux version header
  * make MPOL_ macros match linux kernel
  * add missing policy
  * Fix: Add ShmemHugePages and ShmemPmdMapped to system_meminfo[]
  * Fix: move_pages test for non-contiguous nodes
  * Correct calculation of nr_nodes and re-enable move_pages test
  * Fix: regress test numastat function and few test fixes
  * Fix: distance test to include all existing nodes
  * numademo: fix wrong node input
  * Fix: node_list with memory-less nodes
- Drop autoconf/libtool BuildRequires and autoreconf invocation,
  bundled configure is up-to-date.
- Drop obsolete revert_date_in_numastat.patch, gcc sets __DATE__
  based on SOURCE_DATE_EPOCH now.
- Correct License for devel subpackage, same as for the library
  (LGPL-2.1-or-later).</changelog>
  <changelog author="dmueller@suse.com" date="1601726400">- update to 2.0.14:
  * manpage update
  * numademo: fix issue on 32 bit systems
  * drop custom cflags for libnuma
  * use symvers attribute for symbol versioning</changelog>
  <changelog author="mliska@suse.cz" date="1608033600">- Enable LTO (boo#1133098) as it works now.</changelog>
  <changelog author="dmueller@suse.com" date="1617796800">- include bugfixes in SLE, to enable 32 bit systems (SLE-17217)</changelog>
</package>
<package pkgid="82d056887c6f568d42973a14f64c7a1c647e9d3f79d07d5b0be0b368e8dc715c" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="fdd0b39d0e9c2515edf0522b2f2b3a90b8f2c80d9fe620f3a826bd8ac37a0eba" name="nvme-cli" arch="i586">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="7a102edfb25a82479d42e6d6640daef69a86f4e3dd77d4934c16cb5d4c869e79" name="nvme-cli" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="9988321be63e9684bc6fe4af78875e07834a5a60577f80016f457e222e8b3b27" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e120f009ae1ded706358fbbb4b95343f62dc310202f2481f0cc171786d353f23" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="38adc59008c55e032befb2943934f1584c742dccd8a80f820e4018b489dd0382" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="23a4001e69d9b9c27d82fb67e70bc78c5f3119e72deabcba1cadb45b73514b89" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="3fe8fc89538be79241e71fa910e5320db4662edc246354d13b33cf2e88fda00a" name="nvme-cli" arch="i586">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="d37e36edd2432096719c0a4749a4fbdc6610090f44405c288b5b813195bd6b60" name="nvme-cli" arch="ppc64le">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="79ecab6aa84349e37cddd4f5c5b1762c73156623940fc4b44efe82d1966b3698" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e4d89026bccdb74347443e141fa5dfc3d24c7fb4925d374c62b3c42d5c71d5d7" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e88c114b53fc4ea3bd1e634b13594bab2cc07cf44f486a4dcc1943d69dd9ff71" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="48dfbf6db278ba07eb0c5a43b284584c50b63235a0451fbc6dca05e5c3884c48" name="nvme-cli-regress-script" arch="aarch64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="b6bac93ac3603fcceacb5ca23cb8f8529de1d67071e17eca7718692afd5b5dc0" name="nvme-cli-regress-script" arch="i586">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="a2d1c9ca007dadfdff407aa12754e20bdb8a300a5183c9b789a0c6b9a3bf4a3b" name="nvme-cli-regress-script" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="e67cf46dc69418abe0659cce3044bb4a4e354e5364effee808ec0115eef28d0a" name="nvme-cli-regress-script" arch="s390x">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="d9ad5757d017b4e7202647ecdf90edd345470913bfad0c990b9e344a7776fa87" name="nvme-cli-regress-script" arch="x86_64">
  <version epoch="0" ver="1.10" rel="4.12.1"/>
  <changelog author="sschricker@suse.com" date="1557144000">- Increase size of ONTAP namespace path variable
  + 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
- Fix failing service on devices without fc-hardware (bsc#1133594)
  + 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1561291200">- Add script to determine host NQN based on the system UUID, which
  adds a new dependency on dmidecode for the corresponding archs:
  x86_64, aarch64, i586
  + 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
- Write hostnqn and hostid not only if the corresponding file
  doesn't exist, but also, when it is empty.
- Add new internal only subpackage for regression testing
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch</changelog>
  <changelog author="sschricker@suse.com" date="1563969600">- Update nvme-cli to upstream version 1.8.1 (FATE#327304),
  (jsc#SLE-6589), (eco#166), Tracking Bug (bsc#1142768)
  * Various bug fixes and documentation improvements
  * wdc: new commands: drive status, clear assert dump status, drive resize,
    NAND statistics
  * wdc: support for SN840
  * Add reporting of Virtual Management support to id-ctrl
  * NetApp: add command for NetApp ONTAP devices
  * Add json and raw_binary format for show-regs
  * Revert stop-on-failure with connect-all
- Rename still required upstream patches, which are not part of
  1.8.1:
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  + 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
  + 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
- Drop back-ported patches, which are now part of 1.8.1:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
- Squash downstream patches:
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  + 0100-nvme_fc-add-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0106-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  - 0107-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  + 0101-nvme-add-iopolicy-rules-for-netapp.patch
- Rename downstream patch:
  - 0108-nvme-cli-Add-script-to-determine-host-NQN.patch
  + 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop oboslete patches
  - 0003-generate-new-documentation.patch
  - 0007-Regen-docs.patch
  - 0009-Regen-documentation.patch
- New downstream patch: Remove C99 standard declarations
  + 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.
- Adding %defattr(-,root,root) to be in-sync with SLE12-SP5</changelog>
  <changelog author="hare@suse.com" date="1573646400">- Update nvme-cli to upstream version 1.9 (jsc#SLE-8339)
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
  * nvme-vendor: fix c99 declarations in vendor plugins
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * doc: add extension plugins' command format
  * doc: make description not only for PCIe
  * lnvm: cast identity structure to (void *) directly
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-cli: Restore RHEL 7 compatibility
  * nvme-cli: Restore support for older gcc versions
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * nvme-cli: Rework the code for getting and setting NVMf properties
  * Avoid using arrays with a variable length
  * wdc: Fix endianness bugs
  * virtium: Fix an endianness issue
  * lightnvm: Fix an endianness issue
  * virtium: Declare local symbols static
  * seagate: Declare local functions static
  * huawei: Declare local functions static
  * Use NULL instead of 0 where a pointer is expected
  * Remove superfluous casts
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme: fix coding style issue
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
  * Spin documentation
  * doc: fixup 3rd party man page
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_*
  * nvme-cli: add kernel-doc comment for struct telemetry_log_page_hdr
  * respin documentation
  * Add a note to format on device naming conventions
  * remove non-portable compile-time check
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: use uniform if .. else format
  * nvme-cli: remove trailing space
  * nvme-cli: code cleanup adjust if statement
  * nvme-cli: cmbloc code cleanup
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-cli: cleanup comments for telemetry log structure
  * nvme-print: update self-test log to include 'aborted due to sanitize'
  * DOC: Move to DocBook 5 when using asciidoctor
  * nvme-cli: add missing endianness conversions for telemetry log page
  * property: Fit print size for a property
  * property: Remove unnecessary wrapper function
  * property: Introduce inline function to check 64bit reg
  * Add Disable IO flag to wdc_dump_dui_data function
  * list-ctrl: Do not return directly without freeing fd
  * create-ns: Do not return directly without freeing fd
  * format: Do not return directly without freeing fd
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * spec, make: Add discovery.conf to the package files list
  * spec, Makefile: add /etc/nvme files to package files
  * sanitize: Print nvme status in case ret &gt; 0
  * get-telemtry-log: Print nvme status in case err &gt; 0
  * print: Add const to return type of string
  * print: Introduce show_nvme_status to print nvme status
  * nvme: fix minor type in id-ctrl human readable output
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * nvme-cli: Increase size of ONTAP namespace path variable
  * Fix passing CFLAGS on the make command line.
  * Regen docs
  * nvme-cli: fix typo, removing the duplicate 'are'
  * Revert "plugin: Return EINVAL instead of ENOTTY"
  * Use 0x prefix for all hex values of id-ctrl output
  * plugin: Return EINVAL instead of ENOTTY
  * Fix Failure to read 0xCA Log Page on SN200 Device [NVMe-CLI] Fix Incorrect Data Formats with the 0xCA and 0xD0 Log Pages
  * nvme: Close a fd leaked
  * Release for new stable fixes
  * nvme-cli: Revert stop-on-failure with connect-all
  * Fix NSID for command effects log
  * Fix output size for error log raw binary dump
  * Release version 1.8
  * Regen documentation
  * nvme-cli: add netapp ontapdevices man page
  * nvme-cli: add netapp ontapdevices command
  * tests: Update print to print() for python3
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme: Simplify description for virt-mgmt
  * nvme: Unify min(), max() macro as a common one
  * nvme: Use ARRAY_SIZE() macro in common.h
  * ioctl: Free memory if get_property for fabrics failed
  * doc: Update show-regs document with output-format
  * nvme: Support raw_binary and json format for show-regs
  * Print timestamp as a date and time string
  * Fix format block size usage
  * Fix possible memory leak on get-internal-log
  * doc: Add missing commands to main document entry
  * doc: Update nvme-disconnect by describing options
  * doc: Update nvme-connect-all by describing options
  * doc: Update nvme-connect by describing options
  * doc: Update nvme-discover by describing options
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * fabrics: Return negative errno when asprintf() fails
  * Fix possible NULL pointer dereferences
  * Add reporting of Virtual Management support to id-ctrl
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * wdc: Additional device capabilities check
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * nvme: print I/O error to stderr
  * Add FreeBSD installation instructions
  * Sort operating systems alphabetically
  * Fix markdown indentation issues
  * nvme-print: Fix evaluation of ctratt on pretty print
  * wdc: Add data area extraction for DUI command
  * Generate new documentation
  * wdc: Add command to extract NAND statistics
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * nvme-cli: align all the macros
  * wdc: Update file parameter checking
  * wdc: Update device capabilities for clear pcie corr
  * nvme-cli: fix fc trtype string
  * Add new docs to repository
  * Regen documentation
  * wdc: Add drive resize command
  * wdc: Add clear assert dump status command
  * wdc: Add get drive status command
  * wdc: Add device unit info log extraction
  * nvme-cli: minor cleanup for submit_io()
  * Fix print format specifiers
  * Regen docs
  * nvme-cli: fix compilation with uint64_t cast
  * Adding a helper to format command to enable the user to specify desired block size and have nvme-cli determine the correct LBAF and add format helper to nvme-create-ns command
  * Fix CFLAGS parameter
  * Fix compilation with GCC-8
  * generate new documentation
  * wdc: Add additional device for vs-internal-log
  * wdc: Change device capability checking
- Drop patches merged with upstream:
  * 0001-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  * 0002-nvme-cli-fix-typo-removing-the-duplicate-are.patch
  * 0003-nvme-vendor-fix-c99-declarations-in-vendor-plugins.patch
  * 0100-nvme_fc-add-auto-connect-scripts.patch</changelog>
  <changelog author="hare@suse.com" date="1579608000">- Update to version 1.10 (jsc#SLE-7726 jsc#SLE-8339 bsc#1160329):
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * WDC plugin update
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * nvme.c: create-ns arguments are added
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status
  * nvme-cli: Update Controller Capabilities Register
  * nvme-cli: Update NVMe Registers
  * fixup attach-ns documentation
  * Add files via upload
  * Regen docs, add host-nqn man page
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the
  Smart/Health information Log
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
- Makefile: generate Dracut config according to UDEVDIR
  * Add 0001-Makefile-generate-Dracut-config-according-to-UDEVDIR.patch
- Makefile: use UDEVRULESDIR instead of UDEVDIR
  * Add 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
- Dropped patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.de" date="1580817600">- Add additional smart log critical warn decoding (bsc#1161768)
  * add 0003-Add-additional-smart-log-critical-warn-decoding.patch
- Update patches with upstream version:
  * delete 0101-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * add 0002-Makefile-use-UDEVRULESDIR-instead-of-UDEVDIR.patch
  * delete 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
  * add 0005-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add nvmf autoconnect service
  * add 0004-nvmf-autoconnect.service.patch</changelog>
  <changelog author="hare@suse.de" date="1602590400">- fabrics: write reconnect_delay to fabrics device on connect
  (bsc#1172111)
  * add 0006-fabrics-write-reconnect_delay-to-fabrics-device-on-c.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1615809600">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add fabrics-set-keep_alive_tmo-also-for-discovery-controllers.patch
  * add fabrics-permit-kato-int-argument-for-discovery-controllers.patch
  * add fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add print-device-name-when-creating-a-persistent-device.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1617883200">- Use default port 8009 for NVMeoF discovery (bsc#1180505)
  * add 0011-nvme-add-fabrics-discovery-controller-default-port-n.patch
- Add missing huck in previous backport (bsc#1182591)
  * fabrics-ensure-zero-kato-for-non-persistent-controllers.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Lookup existing persistent controllers (bsc#1179825)
  * add 0012-fabrics-move-connect_args-extraction-to-a-dedicated-.patch
  * add 0013-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="c13061a856b42ec72b627b38817dea35f7364cb2dda9cf05c7ccd335b5ee5857" name="nvme-cli-regress-script" arch="aarch64">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="734c35afd02597755dd2224e35d0d506941c9fd5ba4d8a1f97e7f8e6e20bd763" name="nvme-cli-regress-script" arch="i586">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="5663c74ff3d4fb992159c2e2e99c4b34f644099be43222ea028063eb17cc5b7f" name="nvme-cli-regress-script" arch="ppc64le">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="2869a44d9c7f66291d90125b375b5a103cfaf835d4bfa1a281eae5beb8cf2122" name="nvme-cli-regress-script" arch="s390x">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="d6f4d8e6e928db68c143d2c599717868b045a1f8d0a0931612dbad2c6773a18c" name="nvme-cli-regress-script" arch="x86_64">
  <version epoch="0" ver="1.13" rel="3.3.1"/>
  <changelog author="sschricker@suse.com" date="1557403200">- Update to version 1.8.1+git41.2c43c51:
  * nvme-print: remove Virtual Management support from ONCS
  * nvme-print: update self-test log to include 'aborted due to
    sanitize'
  * move to DocBook 5
  * nvme-cli: add missing endianness conversions for telemetry log
    page
  * property: Fit print size for a property
  * Add Disable IO flag to wdc_dump_dui_data function
  * Reorder primary commands
  * nvme-cli: add identify secondary controller list
  * sanitize/get-telemetry-log: Print nvme status in case ret &gt; 0
  * print: Introduce show_nvme_status to print nvme status
  * ioctl: Fix wrong return case of get_property
  * ioctl: Fix double-free in a loop of get_property
  * improved Documentation
  * fix compilation with GCC-8
  * fix CFLAGS parameter
  * nvme-cli: fix compilation with uint64_t cast
  * nvme-cli: minor cleanup for submit_io()
  * nvme-cli: align all the macros
  * wdc: Change device capability checking
  * wdc: Add additional device for vs-internal-log
  * wdc: Add device unit info log extraction
  * wdc: Add get drive status command
  * wdc: Add clear assert dump status command
  * wdc: Add drive resize command
  * wdc: Update device capabilities for clear pcie corr
  * wdc: Update file parameter checking
  * wdc: Add command to extract NAND statistics
  * wdc: Add data area extraction for DUI command
  * wdc: Additional device capabilities check
  * nvme-cli: fix fc trtype string
  * NVMe-CLI WDC Plugin - add support for additional SN840 device ID.
  * WDC plugin Change vs-internal-log Command to Save Partial E6 Log Data.
  * WDC Plugins vs-internal-log command unsupported on SN340.
  * Fix print format specifiers
  * Fix format block size usage
  * Add reporting of Virtual Management support to id-ctrl
  * Fix possible NULL pointer dereferences
  * Fix possible memory leak on get-internal-log
  * Print timestamp as a date and time string
  * nvme-cli: add netapp ontapdevices command
  * Add FreeBSD installation instructions
  * Adding a helper to format command
  * fabrics: Return negative errno when asprintf() fails
  * fabrics: Return negative errno to check remove_ctrl() is failed
  * nvme: Support raw_binary and json format for show-regs
  * ioctl: Free memory if get_property for fabrics failed
  * nvme: Use ARRAY_SIZE() macro in common.h
  * nvme: Unify min(), max() macro as a common one
  * nvme: Simplify description for virt-mgmt
  * nvme: Simplify virt-mgmt options to lowercase
  * nvme-print: Fix evaluation of ctratt on pretty print
  * nvme: print I/O error to stderr
- Drop obsolete patches:
  - 0001-wdc-Change-device-capability-checking.patch
  - 0002-wdc-Add-additional-device-for-vs-internal-log.patch
  - 0003-generate-new-documentation.patch
  - 0004-Fix-compilation-with-GCC-8.patch
  - 0005-Fix-CFLAGS-parameter.patch
  - 0006-nvme-cli-fix-compilation-with-uint64_t-cast.patch
  - 0007-Regen-docs.patch
  - 0008-nvme-cli-minor-cleanup-for-submit_io.patch
  - 0009-Regen-documentation.patch
  - 0010-nvme-cli-fix-fc-trtype-string.patch
  - 0011-nvme-cli-add-netapp-ontapdevices-command.patch
  - 0012-nvme-cli-add-netapp-ontapdevices-man-page.patch
  - 0013-nvme-cli-Revert-stop-on-failure-with-connect-all.patch
  - 0014-nvme-cli-Increase-size-of-ONTAP-namespace-path-varia.patch
  - 0015-DOC-Move-to-DocBook-5-when-using-asciidoctor.patch
  - 0104-nvme-cli-Fix-documentation-syntax-and-typo.patch
- Rename downstream patch:
  + 0001-nvme_fc-auto-connect-scripts.patch
  + 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  + 0003-Add-nvmefc-connect.target.patch
  + 0004-Change-service-to-type-simple.patch
  + 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  - 0100-nvme_fc-auto-connect-scripts.patch
  - 0101-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  - 0102-Add-nvmefc-connect.target.patch
  - 0103-Change-service-to-type-simple.patch
  - 0105-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch</changelog>
  <changelog author="sschricker@suse.com" date="1558612800">- Add new subpackage containing the nvme-cli regress script
- Add script to determine host NQN based on the system UUID
  + 0008-nvme-cli-Add-script-to-determine-host-NQN.patch
- Add new udev rule for NetApp E-Series and adjust udev rule naming
  scheme accordingly. (bsc#1124564)
  + 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  + 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
- Update to version 1.8.1+git64.b969cf0:
  * fix json print for list-subsys command
  * Add Virtium plugin extension document
  * Add Virtium plugin extension
  * nvme.h: Fix typos in status code values
  * nvme-cli: remove unused NVME_AER_NOTICE_
  * list-ctrl, create-ns, format: Do not return directly without
    freeing fd</changelog>
  <changelog author="sschricker@suse.com" date="1564142400">- Update to version 1.8.1+git135.9bab71e:
  * various documentation improvements
  * nvme-cli: Restore support for older gcc versions
  * [NVMe-CLI] Add support for larger data sizes needed to get DUI data.
  * [Log] Memblaze add more log infomation for S.M.A.R.T.
  * nvme: add Verify command
  * lnvm: do not print 0 when the arg is not given
  * lnvm: remove redundant whitespace in lnvm_init()
  * nvme: clean up goto labels without whitespace
  * format: check BLKRRPART failure
  * [NVMe-CLI] Add support for SN730 to WDC plugin commmands
  * Add verbose capability to get DUI function to improve debug
  * nvme-print: Show value for Transport SGL Data Block Descriptor support
  * [NVMe-CLI] WDC: Add support for 64 bit data addresses in Get DUI Data functions
  * nvme-cli: Fix more endianness issues
  * nvme-print: add JSON for NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * fabrics: Return errno mapped for fabrics error status
  * fabrics: return error when discovery retry exhausted
  * nvme: Return errno mapped for nvme error status
  * nvme-status: Introduce nvme status module to map errno
  * nvme: Return negative error value for internal errors
  * fabrics: Do not return in the middle of the subcommand
  * nvme: Do not return in the middle of the subcommand
  * nvme-cli: Report the NVMe 1.4 NPWG, NPWA, NPDG, NPDA and NOWS fields
  * Introduce NVMe 1.4 Identify Namespace fields in struct nvme_id_ns
  * nvme-cli: Skip properties that are not supported
  * Fix various bugs related to endianness bugs
  * NVMe-Cli Shannon Plugin-add support for shannon systems.
  * nvme-print: fix json object memory leak
  * fabrics: Fix memory leak of subsys list
  * nvme: update description for "nvme list" command
  * nvme: update list-ns nsid option
  * nvme-print: add pretty print for estimated sanitize time
  * add namespace to json output of nvme list
  * add free call for json object for commands show-regs
  * add newline for command show-regs
  * nvme-cli: remove unnecessary initialize of local var
  * nvme-cli: don't try to disconnect for ctrl with pcie transport
  * Fix sprintf truncate
- Reorder install steps: Install systemd services first, since they
  are required for the udev rules, avoiding a theoretical race
  condition.</changelog>
  <changelog author="hare@suse.com" date="1574078400">- Update to version 1.9+git122.c5097d5:
  * [NVMe-CLI] Get DUI for SN-340 failing with Data Area 4 - Buffer Misalignment
  * Minor intel-nvme print refactor
  * Use simpler nvme ioctl api for admin
  * Relocate functions and constants to the files that use them
  * Move all spec defined structs to single file
  * Update build rules for .c with no .h
  * Update my email address
  * Makefile: fix cleaning subdirectories
  * remove unused "paths" controller field
  * reign in line lengths
  * Add print for directive receive
  * Unify print routines
  * regenerate documentation
  * fix fw-download reference to committing fw
  * argconfig: Remove unused paramters
  * fix huawei filter to search all namespaces
  * nvme-cli: Support for hugetlbfs
  * Remove all 'struct nvme_command' usage
  * nvme-cli: Update PMR Capability and PMR Status 	1. Adding Controller Memory Space Supported(CMSS) in PMRCAP 	2. Adding Persistent Memory Region Status(CBAI) in PMRSTS
  * nvme-cli: Update Controller Capabilities Register 	1. Add Controller Memory Buffer Supported (CMBS)
  * nvme-cli: Update NVMe Registers 	1. Add Controller Memory Buffer Memory Space Control (CMBMSC) 	2. Add Controller Memory Buffer Status (CMBSTS) 	3. Add Persistent Memory Region Memory Space Control (PMRMSC)
  * fixup attach-ns documentation
  * Add files via upload
  * [NVMe-CLI] Updates and fixes to WDC plugin command vs-internal-log for the SN340 drive.
  * Regen docs, add host-nqn man page
  * [NVMe-ClI] Add Documentation files for clear-fw-activate-history command
  * [NVMe-CLI] Add clear-fw-activate-history WDC plugin command
  * fix namespace checks for legacy list
  * Reset wdc_do_cap_dui default parameters to the proper values
  * README.md: Mention the OpenEmbedded/Yocto recipe
  * Intel plugin: Adding fields to id-ctrl VU region Per https://github.com/linux-nvme/nvme-cli/pull/584/commits/f33510efbf5192116e5757d13a02463d446a1dc5#r332178975 removing pack pragma on vu_id_ctrl_field struct.
  * udev: convert the discovery event handler to the kernel support
  * Use a systemd app-specific machine ID for hostnqn
  * nvme-cli: Add 'transport type' error to the error log
  * nvme-cli: Update nvme_endurance_group_log structure
  * Adding fields to id-ctrl VU reigon for Intel DC drives
  * Check return value of scandir
  * nvme-cli: Add namespace-id option to self-test-log
  * Report invalid output format for 'list' command
  * Provide no-binary output format help text
  * regen documentation
  * Documentation: nvme-wdc-vs-fw-activate-history(1,html) generated
  * nvme-cli/fabrics: Add tos param to connect cmd
  * nvme.spec.in: fix rpm build error
  * Correct self-test-log output
  * nvme: Add 'Endurance Group Critical Warning Summary' to the Smart/Health information Log
  * [NVMe-CLI] Documentation file for WDC vs-fw-activate-history command.
  * [NVMe-CLI] Add new WDC plugin command vs-fw-activate-history.
  * make: install-hostparams depends on install-etc
  * MAINT: compile warning error on 32 bit system
  * nvme-print: fix to print ctrltype when human-readable
  * nvme: add Persistent Memory Region(PMR) Write Elasticity Status Registers
  * [NVMe-CLI] Fix Potential Memory Leak with vs-internal-log command.
  * regen docs
  * fix admin-passthru documentation typo
  * [NVMe-CLI] Fix empty file issue with vs-internal-log wdc plugin command
  * nvme-cli: Fix namespace list output
  * Fix builds for missing uuid
  * Revert "remove LIBUUID things from nvme.h"
  * Revert "nvme-cli: Fix compile on non-libuuid machines"
  * Revert "fix uuid include typo"
  * [NVMe-CLI] Fix offset parameter size for vs-internal-log wdc plugin command.
  * remove LIBUUID things from nvme.h
  * fix build error due to asprintf()
  * id-ctrl: show Flush command behavior in VWC
  * fix uuid include typo
  * nvme-cli: Fix compile on non-libuuid machines
  * [NVMe-CLI] Add updated documentation for additional parameters to specify file size   in vs-internal-log command.
  * Regen docs
  * nvme-cli: Code cleanup
  * nvme-cli: Macro'ify argument defines
  * nvme-cli: Code reorg
  * [NVMe-CLI] Add support to specify file size in get DUI data for SN340.
  * Regenerate documentation
  * nvme-cli: Make 'list' more useful
  * id-ctrl: show Persistent Event Log support in LPA
  * id-ctrl: show Persistent Event Log Size(PELS)
  * id-ctrl: show Endurance Group Maximum ID(ENDGIDMAX)
  * id-ctrl: show FRU Globally Unique Identifier(FGUID)
  * id-ctrl: show Controller Type(CNTRLTYPE)
  * id-ctrl: update id-ctrl header for 1.4
  * systemd: fix echo call with absolute path
  * nvmf-autoconnect: fix absolute path for systemctl
  * make: install udev rules in sysconfdir
  * Add an example for attach-ns
  * make: fix discovery.conf override
  * fabrics: fix loop connect-all
  * nvme: fix compilation error
  * nvme-cli: Enhance format FNA detection
  * nvme-cli: Warn and delay before formatting
  * nvme-cli: prefill metadata buffers
  * Fixed bash-nvme-completion.sh typo
  * Tag release: v1.9
  * Regen docs
  * nvme: UUIDs for Vendor-Specific Information
  * nvme: add Persistent Memory Region (PMR) registers
  * get-lba-status: add Get LBA Status command
  * Added openSUSE Leap to README.md
  * id-ctrl: add 1.4 features to OAES
  * Update packaging state in Arch Linux
  * Fix code block style in the first section
  * nvme-cli: nvmf auto-connect scripts
  * nvme-cli: add --quiet option
  * nvme-cli: Expand --device argument processing
  * nvme-cli: Add routine to search for controller with specific attributes
  * nvme-cli: Add routine to compare ctrl_list_item to connect args
  * nvme-cli: extend ctrl_list_item for connect attributes
  * nvme-cli: Refactor to create a get_nvme_ctrl_info routine
  * nvme-cli: allow discover to address discovery controller by persistent name
  * nvme-cli: support persistent connections to a discovery controller
  * nvme-cli: ignore arguments that pass in "none"
  * nvme-print: show new CMBLOC bit fields added in NVMe 1.4
  * nvme: add support for Namespace Granularity
  * nvme: sanitize enhancements
  * nvme-cli: Update manpages to reflect discovery particulars
  * nvme-cli: mask out invalid options during discovery
  * nvme-cli: do not use 'queue_size' and 'nr_io_queues' for discovery controller
  * nvme: Enhanced Command Retry
  * id-ctrl: add an indicator for get lba status capability
  * nvme: change format default namespace id
  * lnvm: introduce alias geometry for id-ns for lnvm
  * lnvm: introduce chunk-log command for chunk info
  * lnvm: make data_len to sizeof() instead of magic number
- Add patches from SLE15:
  * 0101-nvme-add-iopolicy-rules-for-netapp.patch
  * 0102-nvme-cli-Add-script-to-determine-host-NQN.patch
- Drop patches merged with upstream:
  * 0001-nvme_fc-auto-connect-scripts.patch
  * 0002-71-nvme-iopolicy-netapp.rules-add-default-rules-for-.patch
  * 0003-Add-nvmefc-connect.target.patch
  * 0004-Change-service-to-type-simple.patch
  * 0005-nvme-cli-Check-for-sysfs-interface-before-NVMe-disco.patch
  * 0006-nvme-cli-add-default-IO-policy-rule-for-NetApp-E-Ser.patch
  * 0007-nvme-cli-Rename-udev-rule-for-ONTAP-controller.patch
  * 0008-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="hare@suse.de" date="1574164800">- Add libhugetlbfs to the list of build requirements</changelog>
  <changelog author="hare@suse.com" date="1579176000">- Update to version 1.10.1+git2.797ec65:
  * Makefile: generate Dracut config according to UDEVDIR
  * Add additional smart log critical warn decoding
  * New tag for missing docs
  * Add new wdc documentation
  * Release v1.10
  * Regen documentation
  * Use asprintf for long names
  * [NVME-CLI] Add documentation file for vs-error-reason-identifier WDC            plugin command. [NVME-CLI] Minor updates/corrections to the clear-fw-activate-history            and vs-fw-activate-history command help text.
  * [NVME-CLI] Add support for WDC plugin command - vs-error-reason-identifier [NVME-CLI] Reverse enable/disable bit on the vs-telemetry-controller-option            WDC plugin command
  * Fix systemd service script use of CONNECT_ARGS env var
  * Shannon Plugin update.
  * Doc/Makefile: Introduce 'quiet' build option
  * Makefile: use 'quiet' compile
  * Makefile: Use special variables
  * micron: don't ignore 'system()' return value
  * Fix libhugetlbfs flags
  * Regenerate documentation
  * Micron plugin updates
  * README.md: Mention the buildroot package
  * nvmf-autoconnect: add udev rules to set iopolicy for certain NetApp devices
  * Fix intel json latency statistics output format
  * intel: Add function lat-stats to cli Adds the lat-stats function to intel plugin. If lat-stats-tracking is enabled, lat-stats will print out latency statistics according to the user's desired format.
  * [NVMe-CLI] Update documentation for telemetry data retrieval to vs-internal-log wdc plugin command.
  * [NVMe-CLI] Add support to retrieve telemetry data in vs-internal-log
  * [nvme-cli] Add documentation file for new  wdc plugin command - vs-telemetry-controller-option
  * [nvme-cli] Add support for wdc plugin command - vs-telemetry-controller-option
  * Fix typo (bulit -&gt; built)
  * Warn on admin-passthru opcode not matching read/write flag
  * MAINT: Fix format compile warning error on 32 bit system
  * nvme-cli: Check for sysfs interface before NVMe discovery
  * Revert "Add Dera plugin extension."
  * Revert "Add Dera plugin extension."
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * Improve self test log command
  * nvme-cli: Update err to 0 in get_telemetry_log
  * fixup up self-test log when no test is in progress
  * nvme-cli: Update err value to 0 in get_ns_id func.
  * Add Dera plugin extension. Add stat sub-command to retrieve Dera device status and additional SMART log.
  * nvme.c: create-ns arguments are added
- Remove patch merged with upstream
  * Delete 0101-nvme-add-iopolicy-rules-for-netapp.patch</changelog>
  <changelog author="hare@suse.com" date="1580126400">- Update to version 1.10.1+git9.872e6b0:
  * fabrics: fix connection args parsing
  * nvmf-autoconnect.service
  * Fix status displayed by vs-telemetry-controller-option wdc plugin command.
  * Provide documentation for log page directory WDC plugin command
  * Provide WDC plugin command to dump log page directory
  * Tests: Hande string encoding and handling failures
  * Makefile: use UDEVRULESDIR instead of UDEVDIR
- Rename 'nvme-det-hostnqn' script to 'nvme-gen-hostnqn'</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 1.12
  * Corrected text output in FW activation history
  * nvme: allow addr family to recognize loop
  * Add log page CA parsing
  * nvme status code updates based nvme spec v1.4
  * Provide documentation for log page directory WDC plugin command
  * Fix status displayed by vs-telemetry-controller-option wdc plugin
  * fabrics: ignore hostnqn file if its empty</changelog>
  <changelog author="daniel.wagner@suse.com" date="1603454400">- update to 1.13
  * support for zoned command set
  * Identify I/O Command Set data structure command added
  * Added new namespace list command on list-ns, 4056 modification added
  * Added temperature information getting and text formatting
  * Implemented additional statistics to display
  * nvme: add support for non shared namespaces</changelog>
  <changelog author="daniel.wagner@suse.com" date="1621339200">- Add KATO fixes for NVMEoF (bsc#1182591)
  * add 0001-fabrics-ensure-zero-kato-for-non-persistent-controllers.patch
  * add 0002-print-device-name-when-creating-a-persistent-device.patch
- Lookup existing persistent controllers (bsc#1179825)
  * add 0003-nvme-discover-lookup-existing-persistent-controllers.patch</changelog>
</package>
<package pkgid="766b196ee1c82882e87b3678dc85ad35022e6862846c673d2037222dd21e5520" name="ocaml-hivex" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6eb7852321732a588fc4760924ba2df19d28e342972c3a1c3ee7f704920a0fad" name="ocaml-hivex" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="a6543a6180a824fcf98ac9b4182fe4220787a29a6e0b8c394d6b23b8f8f7c866" name="ocaml-hivex" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="3ba527cfabfd4f763c8c9ae6822737ab3d4f6d282882cdf4ed13736080722c94" name="ocaml-hivex" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="31165f86c6f9e75360f73174392233ff60a321634143f27263768313599d15c8" name="ocaml-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="8fbaafcf6e120fc60eb3da9750e3bd9cd0956ea53119f84c25ef6a43dbf7529f" name="ocaml-hivex-devel" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ed38270c36770fc155827dd90f0d9095f1b82749a616fbff28480e411d6c8769" name="ocaml-hivex-devel" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="57f40c7adbdd49bd2dbf494cb87a939ab353868d96145a13cc322330dbb98b0c" name="ocaml-hivex-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="8e9d82147e075ca49da3500a864a163b92219ba08178d1bd665cc66096b87016" name="ocaml-hivex-devel" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="4b639c535892a2ee4363c49d05e9b53b7e9bc843d3e99ecdf79e8164933f6842" name="ocaml-hivex-devel" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="6feb6bbcca5ce2c7e05f37e6777c6e142a149ef117e9b7569df3e2891526197f" name="ocfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="5c59501377369dd97b79142a318227cd5f145573d05e405ec657df079afeb6cb" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="f7a38d47df694eaeba193343f22bbfa0886de7c76659078f24f1c6e3df55b513" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="8de1b91bc3f405d00bf5ae002377c3d3a0acc9d8ef8195203ce868e0d3b97077" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="5eb51da5e99b8af2e47bb2556bdb229b696aa8c29dff49f06c246f0fdafb0ba6" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="18502cd73b3272553bf3b34f666c77b1b0bc7b456d3e725ffa6617388c8423cc" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="b115338c73b2f395175db2bf295d3bbd8e60e668c994d798669a48013f50cf0a" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="2076c9965da937cfefcc1fc7d6393f2a0b7f5e14a410a431cbeaa8164247f4f3" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="c196ea959b94f1603bab69d7a21df55c47c02b66a1609ca6db2c14e5d060f9fa" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="37a1c925a15559de674935765252e7bfdb328f47631106f3cdf7c443bc5ad717" name="ocfs2-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="58d7f7608c84f0b87b4e406d51bd5c6436122c596b73547b88b745d4a3e035ad" name="ocfs2-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="95f8de72f22ecc8d6d547a11f267a6a8adfe5f430c3d503e3773afdc803d09fa" name="ocfs2-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="3749f6e36c234734213024d899b1031ce235e49df0f47ec9e5cf951043ab5b6c" name="ocfs2-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="3706a2003edaaba0c2798109279b1be96a45666907df09b9932acb720b73a488" name="ocfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="c052b4e96c12554ee3237f50d77ca321c18d37188cf3cb7ceefb3b5b8a3dc7d4" name="ocfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="d5875353327b2a58cccc8aaa44ce1207b15a77d8b4bc460f7bf1bd66999debcf" name="ocfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="bfccc4e291d44f190a09a9871e666772875079f6d17ec90052d81ce3bf691271" name="ocfs2-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="094b70f0aca2ad0a4b973557cda810ab99f3da37c4978e4265f98344b4ab0397" name="ocfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="372c4486fc2a35bfde076f631c277fa45e5033e84377bb23b47606e2b3956570" name="ocfs2-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="a737651eda35e20128796f2c57c2d2cefb6e7439e06ab90f02cc5fe05fdb12f4" name="openmpt123" arch="aarch64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="f0bd2b2baea554620ab4d03d8937585dfc966c9648fee93d58435bcba133d2f0" name="openmpt123" arch="i586">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="a2ae05e0468db5e984f816319b0e58eb64776d69778b684b8f52c800f904d236" name="openmpt123" arch="ppc64le">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="d8d9cf8548e1e87f6a01dc8e6cdd873983b0a13233e422f71558cf1c1001e8a5" name="openmpt123" arch="s390x">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="fc4d4ddc2017ce9c5506cac30cee6e02409f2910dcda62c69ea8a4750e704a31" name="openmpt123" arch="x86_64">
  <version epoch="0" ver="0.3.28" rel="2.13.1"/>
  <changelog author="tchvatal@suse.com" date="1495454400">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
  <changelog author="tchvatal@suse.com" date="1565784000">- Update to 0.3.17:
  * Update to latest release to get all the security fixes:
    + bsc#1143581 CVE-2018-20860
    + bsc#1143578 CVE-2018-20861
    + bsc#1143582 CVE-2019-14382
    + bsc#1143584 CVE-2019-14383</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Update to 0.3.19 bsc#1153102 CVE-2019-17113:
  * Update to latest release to get security fixes</changelog>
  <changelog author="mia@0x0.st" date="1616241600">- Update to 0.3.28:
  * Fixed excessive memory consumption with malformed files in
    various formats.
- Changes in 0.3.27:
  * AMS: Avoid allocating excessive amount of memory for compressed
    song message in malformed files.
  * S3M: Some samples were imported with a too high sample rate if
    module was saved with Scream Tracker 3.
- Changes in 0.3.26:
  * DMF: Improve import of finetune effect with parameters larger
    than +/-15.
- Changes in 0.3.25:
  * AMS: An upper bound for uncompressed sample size is now
    established to avoid memory exhaustion from malformed files.
  * MO3: Avoid certain ModPlug hacks from being fixed up twice,
    which could lead to e.g. very narrow pan swing range for old
    OpenMPT IT files saved with a recent MO3 encoder version.
  * IMF: Instrument sample mapping was off by one octave, notable
    in the guitar part of Astaris by Karsten Koch.
  * PLM: Percentage offset (Mxx) was slightly off.
- Changes in 0.3.24:
  * PP20: The first few bytes of some files were not decompressed
    properly, making some files unplayable (depending on the
    original format).
- Changes in 0.3.23:
  * IT: Global volume slides with both nibbles set preferred the
    ?slide up? nibble over the ?slide down? nibble in old OpenMPT
    versions, unlike other slides. Such old files are now imported
    correctly again.
  * IT: Fixed an edge case where, if the filter hit full cutoff /
    no resonance on the first tick of a row where a new delayed
    note would be triggered, the filter would be disabled even
    though it should stay active. Fixes trace.it by maddie.
  * XM: Out-of-range arpeggio clamping behaviour broke in OpenMPT
    1.23.05.00. The arpeggios in Binary World by Dakota now play
    correctly again.
  * S3M: Support old-style sample pre-amp value in very early
    S3M files.
  * S3M: Only force-enable fast slides for files ST 3.00.
    Previously, any S3M file made with an ST3 version older than
    3.20 enabled them.
  * M15: Improve tracker detection heuristics to never assume
    SoundTracker 2.0 if there is a huge number of Dxx commands,
    as that is a definite hint that they should be treated as
    volume slides. Fixes Monty On The Run by Master Blaster.
- Changes in 0.3.22:
  * IT: Disable retrigger with short notes quirk for modules saved
    with Chibi Tracker, as it does not implement that quirk.
  * MOD: Fix early song ending due to ProTracker pattern jump quirk
    (EEx + Dxx on same row) if infinite looping is disabled.
    Fixes Haunted Tracks.mod by Triace.
  * MOD: Vibrato type ?ramp down? was upside down.
- Changes in 0.3.21:
  * IT: Vibrato was too fast in Old Effects mode since
    libopenmpt 0.3.
  * XM: Treat 8bitbubsy?s FT2 clone exactly like Fasttracker 2 with
    respect to compatibility and playback flags. For example,
    FT2 Pan Law was not applied.
  * DMF: Some files had a wrong tempo since libopenmpt
    0.2.5705-beta15.</changelog>
</package>
<package pkgid="83a679e2e300bab5684651299f712e3695dabf68319e9b6cfa4fbc8baed5d699" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="9fe2907e17fd192ee9138aa9b9334f933944e7c5d24e30d338f79690ab40c8b3" name="openssh" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="5040820b03dd7fe519c2268fa884c93c41a9eb90eeade64a84d9225c7db3574a" name="openssh" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="fb0d58330818ce87d7e7062de7c2d4cf3816a8fc8ef1c89a7846874313be9c1b" name="openssh" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="f741a456d22e3dcbe5087338521ccb344c85e9075c110a0b1421869a332b616f" name="openssh" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="e31a6c264c4e720ff901870b52598c9b5c3de6c5ca6f547a9b695b69c31e991a" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7dd3a3f328c07badd71f5bace23a3af1d023de2e472fe553d4697193df8fecae" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="ecac798f41ffc61f5b2f97f62de286ae6d28a669463869f55a2fd21b37a971f8" name="openssh" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="1aa03a7d1c76c6a379fae356a9d46211911b9e346f2d6b2886c63126012db0ab" name="openssh" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="7f46ebd8b6487d55f6c11345e65aedfb3f693884fc31f568da02c3e995ae5f64" name="openssh" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="6f21f0f6f77768c90d832cc1b5b3c7c065d2a33db9f54c3770c5c77ad82a9ab7" name="openssh" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="4fcdcb63ec368e4595cd8d22a7f5c65b00db917820652c3fd9bdb94c8d48660a" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="bb688eb35d6bacfacadba3329ba52e5c4a4679f8cd4d0d8b7990b935bc94d5e7" name="openssh-askpass-gnome" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="ced840d6dc6c88ff2cadbe62ea4a286cd0b6ebf61d8b85476a141a920d279c3b" name="openssh-askpass-gnome" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="e509f1358385a5776a36dfbb0c41e392a3d19fc92d7705bcfbd4f5cf1c2fc496" name="openssh-askpass-gnome" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="9eacc8a49f2367e3b93d4617b165608e76d1678c4ad5dc51b193e5d793a31ffd" name="openssh-askpass-gnome" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="e9c71fc3b4afd18129b41b6398d24ded078122680e7150c83de727a25b2f9dea" name="openssh-askpass-gnome" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="555e56dd1adbdff0b772b583980d5bff28e6373c990a7b2ffba60618cb2ecc88" name="openssh-askpass-gnome" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="a44b8e80353c62111df5bd27a816ff468aed6c40e1d3e09e715f2e91bf3738fa" name="openssh-askpass-gnome" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="f5cba850590aa05a69501329ac460d5eb21a9ceb3824ee88c911798e067c9c06" name="openssh-askpass-gnome" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="5bef1a08a1000e139923c64c63f573899cdadd9c52033939752ecb0faae41ee8" name="openssh-askpass-gnome" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="286506176dc2e6db94a95a30681d021417b7e30d735009a22e8f01d8d8607652" name="openssh-askpass-gnome" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="89d7e565bec7a75b3d99ef18750283aacba509d2ee196821a3027c3f1897f5fb" name="openssh-askpass-gnome" arch="src">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="c5300c5f51bb407a75b004e45fd02ec1b3297b9018945fcfe8f09094ae1335f3" name="openssh-askpass-gnome" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="pcerny@suse.com" date="1423569600">- changing license to 2-clause BSD to match source</changelog>
  <changelog author="pcerny@suse.com" date="1460894400">- upgrade to 7.2p2</changelog>
  <changelog author="meissner@suse.com" date="1469448000">- fixed url</changelog>
  <changelog author="pcerny@suse.com" date="1509710400">- upgrade to 7.6p1
  see main package changelog for details</changelog>
  <changelog author="pcerny@suse.com" date="1517400000">- .spec file cleanup</changelog>
  <changelog author="pcerny@suse.com" date="1526904000">- Upgrade to 7.7p1 (bsc#1094068)</changelog>
  <changelog author="tchvatal@suse.com" date="1539086400">- Update to 7.8p1:
  * no actual changes for the askpass
- Format with spec-cleaner
- Respect cflags
- Use gtk3 rather than gtk2 which is being phased out</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540209600">- Version update to 7.9p1
  * No actual changes for the askpass
  * See main package changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1550145600">- Supplement the openssh and libx11 together to ensure this package
  is installed on machines where there is X stack</changelog>
  <changelog author="fvogt@suse.com" date="1563451200">- Supplement libgtk-3-0 instead to avoid installation on a textmode install
  (boo#1142000)</changelog>
</package>
<package pkgid="834496204f3a231a5c758ef88db61c6e8cf86223951a4b5192c47e0a13f6ae7c" name="openssh-cavs" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7ec6eb4be31861f1590e952c9d709bd44f7af4eafb1458dbcbf95f3f0438aa83" name="openssh-cavs" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="5236a9ab28efb404dad53673710e51983270f43e8c60af763ab032efc1abd0de" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="a3d730632f81743a7d3c98b0983b907559fa07fdc31794b752956ba76f2a1540" name="openssh-cavs" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="6cda8094dc51e60bad10a6abdd214df220ad3124ac37445cdd65b2d59bf09714" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="6a779511b131cc2c8912425f9a8b58d7bc7351a50f36e7bf7ff3f3b0e6744b3e" name="openssh-cavs" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="685fb663c66edfc2220a06599afaecbab303126e0b3c233657e41b177452bf85" name="openssh-cavs" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="1d264142be6da5dc0324e233c1a19832909e231c2eca0d09ab80a0eb467db8e3" name="openssh-cavs" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="dc117d2f62a667d1d687cbcdcb9bb76ef25b799d6a888ad2fe8b2cc4075d4a50" name="openssh-cavs" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="2151ce162424340046123a0fd34e3012452fb8c08dce87bec9f222b96695d64b" name="openssh-cavs" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="6053cded6300486e50da367b2ba81b83f7ff6fc9eaa745c281b3f2c9ca328cfd" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="64c78d5e815c7c532f87127d4dc0d272b65ab4b230d4cf342ca405246f29428b" name="openssh-fips" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7049bcf4961b7fd32c9176dda75adacc8b7c8f802af7b9ec382dcde0e930ddf3" name="openssh-fips" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="c76fd5ef659a77fad474e00f4d1a5196625e6ecae2acc36dae389b4a64abf641" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="2601b9db818182c7c964f0f382455ce5b6963dea96fa8577a54ba3913b1e886a" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="823306262fb150914a25ca48cb3acc39c81327b602a75431cf4330d279ef4632" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="54f9210c1c1a4efaa20783df91c88417a22b045835651df64dfc3a9e60c00bd0" name="openssh-fips" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="050f109df62ee17a85ab7e519656d10cdb542003f248fc75db6006633d56f92a" name="openssh-fips" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="4e944ef93fae8429aef994368d713f577a57d40a77976d905cc9181138919423" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="904ed914c88d68c5d667b06b31248de417aec0beda4562203afcdf0079f5cba4" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="195ad99a6aea5065e8046526b2553158af65cc661fd05148ac2338d3b685f231" name="openssh-helpers" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="883d8278f94e7e926ca41ef725c3bc4d0a65430fa17362bbd2cd76313c515950" name="openssh-helpers" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="df070a9f49683e769062f067acced5eb5ad4ce85b9cdf5f79617ee4e9499077f" name="openssh-helpers" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="b5e1fa129b7bc34f1ef2e72a9edf02458f82a5d4e0aee2e9ce5783f44e63f0f5" name="openssh-helpers" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="7c54da011e1899671007d71543a25fdc16719dfbe6551ec66810a5cb79cc9d82" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.15.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1573214400">- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
  glibc master implements multiple functions using that syscall making
  the privsep sandbox kill the preauth process.</changelog>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
</package>
<package pkgid="441a59ad6d29f7fec6d3031df2b490cfc9180f2e7352ef8c65d837a57f1f3a38" name="openssh-helpers" arch="aarch64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="6e64b06afd458015a7eaf86e4d5a6e2b0503a3736a6d36aa4c9c8224aa2b01c8" name="openssh-helpers" arch="i586">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="27d9269c30f2399bd9f1f38fc1c7f494ffac7d5f7b0ebc9d6d94f92fb4836b3d" name="openssh-helpers" arch="ppc64le">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="e6050fac957f4de6e99d5bb6417f79c7e2b3254a7d7dc66eca70cbe80db0f33e" name="openssh-helpers" arch="s390x">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="33943d9aed0d350fb4e418215f013af0c2a09112c34cf5af1753bfbeed567b18" name="openssh-helpers" arch="x86_64">
  <version epoch="0" ver="8.1p1" rel="5.18.1"/>
  <changelog author="hpj@suse.com" date="1574337600">- Make sure ssh-keygen runs if SSHD_AUTO_KEYGEN variable is unset
  or contains an unrecognized value (bsc#1157176).</changelog>
  <changelog author="hpj@suse.com" date="1581422400">- Add openssh-8.1p1-use-openssl-kdf.patch (jsc#SLE-9443). This
  performs key derivation using OpenSSL's SSHKDF facility, which
  allows OpenSSH to benefit from the former's FIPS certification
  status.</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add patches to fix the sandbox blocking glibc on 32bit platforms
  (boo#1164061):
  * openssh-8.1p1-seccomp-clock_nanosleep_time64.patch
  * openssh-8.1p1-seccomp-clock_gettime64.patch</changelog>
  <changelog author="lnussel@suse.de" date="1582891200">- Don't recommend xauth to avoid pulling in X.</changelog>
  <changelog author="hpj@suse.com" date="1601035200">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1604318400">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1606910400">- Add openssh-CVE-2020-14145-information-leak.patch
  (CVE-2020-14145, bsc#1173513). This partially mitigates a
  potential information leak during host key exchange that could
  be exploited by a man-in-the-middle attacker.</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits.</changelog>
</package>
<package pkgid="ab7c154a6667745539f947ccf8dd0d17d1ec6017d9eb7c6bbeca4cccf980c610" name="osasnmpd" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="19a403d394587a6f7bf39ca668554e83083473f1ea0be8704900164343172ef3" name="ovmf" arch="aarch64">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="4df9e3424eb91a72c77e138d0d30b3121bf37a2430b1078c751d634fc1ceb543" name="ovmf" arch="i586">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="28f0bfc8e379d5bf3fdfa4e04303f70e91af2de9046bd124015688e96d0ca1f0" name="ovmf" arch="src">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="71371f480cf45d2f393fb560ef3cb1a48144918481d3494d957e2ece28b07c83" name="ovmf" arch="x86_64">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="566ebeba93974a4ed01d6e6ded2a2cc482a7e801db51e561e747ec7c1c75122f" name="ovmf-tools" arch="aarch64">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="d74b1324945e3276da3c79def0b4a6090e2c2cfa03d973d02c2c74a363cae81a" name="ovmf-tools" arch="i586">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="2286e0bb82cd01723b0e0ab5f23e7084869dc8bd46bdf2a92e40284c234331ac" name="ovmf-tools" arch="x86_64">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="0e6e33741593a7b6f330331b511b410d4eba5e2b72949f3977c17df600f6cef8" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="78e6231fd9d4d1bb62c5fe80724b88af465f47a1b372fe268c108718c5390ea8" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="db47f177b4b6e26b6cac78573cf3e3a3ee963a3f6d82f953fd6bc321ff7fd508" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c6c285521404b2f634fd89252cb50edf290f535e0d2d7fbad4bfbebf8f9f5b87" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="313b2727e081cc796158232db308366abf924d5e6985b14a030f8514400b1ec0" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d55a1f4744035993399c108aa9df87e921698bb6744f92d0ef66a93529c78aad" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="343355ec77d40a16267c4290c83fb3735caa377545066e905f85586ecaa2f555" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2630fe4fd9ecd7a688a4dbf5d66bdcf2e7667aa652b7e8f6e42db470b024ef87" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="8de906e2d30489230c5977079dd4601706fc5101ad142ee0e1e64563251d6b63" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="683ce036a1341d97f611288d21df611d154b05ffb25e47873c9c6c9938ce3682" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="f98ce9f3a353cd17f6e90a4eeced762c355e06daada75ff1c5544d77796ec7cf" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="56678ae66279ef1997a04cee493730c3b37dd417f804d1a73814bd8250ba7fce" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e37841c810d90e0f943f3dca6000b2b7f1612a458f735d79ebe00f7876e954b8" name="pacemaker" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="71d89a66bd4b494aa4a34f98ee7c2bd07adef4f1c690d955aee8558d0aefe78d" name="pacemaker" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9acade9490c1574f445e72b8f6901dc5520f494b719f30438578ae24e71fc67d" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="38be18d4a53ce4ba56caf1854ab521bb4b17d4c4f4e6f6379d3a76130eff0cd7" name="pacemaker" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e0145cf2abbbe5a113745e1c018822f816c7e2042b42074c2f7d279a79cb63ea" name="pacemaker" arch="src">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="97abbe50e192436d0dfe3d31560aaa926d659cc0c7088c3c26a284f09a8decbc" name="pacemaker" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="3907e657b35d2330bd1985248f8f8ca1b32f301fb90fac365f5b2f46b0ed7bf7" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="09772b870e01d881274f611b87ce604b403cb0652542459a0fa6c83f6a77beb9" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="ac9586bc1fc664f4df4daa6a227c0787d6ded1da54dd50590ab226fe29c0b448" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="30f5b48e24bf86a04c61626931482fcfc742554f7b38a405591559d1b6977f2e" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="9099c24dd150a71a49c3cb6d8c2800957958c41c192db7a59e076dae720341a7" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="b5cb719b351d2456cfa4d33ebdd608dfb98d6fac51656b1672fb5f4abc926516" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d2ba51af301f5516d9e088bc2a244114c25a2875534de15e2098099e1def39aa" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2d1a057591837af282294ab577a5438fe6f60642ce15d44ec97aad2b403cc7f4" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="6a37848c33e912b468f9cbbb7046df658d44af52ad5f2a9d689637e3f14e16f7" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="fa5b049ed64d4a8a2f8ed24482ffb6c497f4b0cf64b358f5b323ebf2710baa88" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="50e1fc92c59c0adcfcd77e1c309a612b117a4fbc17a0f076946c0dc6cf1f495a" name="pacemaker-cli" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="a350a5a91202ea2d1c5df21098feec88b7d3d69aa367c33a5bc6d68bdd8b97b8" name="pacemaker-cli" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="93bb0253975560bbe3c3fc4e1379d04095edfaa8ba894c0d09aa86a7b8ed941e" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c375b41370d838971d09bc42a177c47e59c09e50034cf151d57e495c3ca37b7c" name="pacemaker-cli" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c10ac2ff367744042aa92c9a04c621c64bfd6e43c9d353162018db7677fe3a50" name="pacemaker-cli" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="63d72ecbaad98b53e9cec496c13937d1e865898ce16613fa12b31334988da2ad" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c885fc4aa89a572bd58f33af96255f4e2655f6315cea07d42298bb3e4d6d0adc" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="5d9391e02fbb3f1608667b5a67c74333d7b6f496dc84e861d39755d3fe6a5b85" name="pacemaker-cts" arch="noarch">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e022af0907344387edc0ec3e1529db3e04e359f79dcdaee71dd8ce23145aa74f" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="406ad9856d9ec64a2aecbc749c25e3516c5eb2cfebdf3cb4111e14909f2452cf" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="59f42761689a2dece663bb11d24075dc4617b2dad59667733f3d90e406b80d5e" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="5868256f521ed11db5b462b80b5b2871dfd728650674377564eb5ff871ff696f" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c4a3b726bf6fd2f013f3ab9d77bf713443657e8b9b8bb35a4fa3377e46c6a321" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.1+20190417.13d370ca9" rel="3.18.1"/>
  <changelog author="ygao@suse.com" date="1603972800">- fenced: Remove relayed stonith operation.(Fix:CLBZ#5401) (bsc#1181744)
  * bsc#1181744-0001-Low-fenced-Remove-relayed-stonith-operation.-Fix-CLB.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0010-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0009-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0004-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Log-libpe_status-downgrade-the-message-about-the-mea.patch
- scheduler: clarify message about when watchdog will be used (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-scheduler-clarify-message-about-when-watchdog-wi.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="a2c177767f906c7cdc3c198fb37a8dbb9b4877682a0ab95031f203ee4423c957" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="4b784388b0ece897739fe750f0f9c5011c5fb22e08ce8f1c07dde81682dbaddd" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="1559c2c0e7dbd11201e18ec529e30e8129f4f550825414b4dffc86149f3c0a70" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e63f4d07f2caa2bd67abe6a018d54f157ff5aca038a88ea85abdf267b08486e2" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="f66d1af411c9a7087715e07b5bf669973e58eb21d7692533301b5ab4080a4cf0" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.4+20200616.2deceaa3a" rel="3.6.1"/>
  <changelog author="ygao@suse.com" date="1604059200">- scheduler: update migrate-fail-9 test for migration code change (bsc#1177212, bsc#1182607)
  * bsc#1177212-0002-Test-scheduler-update-migrate-fail-9-test-for-migrat.patch
- scheduler: don't schedule a dangling migration stop if one already occurred (bsc#1177212, bsc#1182607)
  * bsc#1177212-0001-Fix-scheduler-don-t-schedule-a-dangling-migration-st.patch</changelog>
  <changelog author="ygao@suse.com" date="1604059201">- controller, Pacemaker Explained: improve the documentation of `stonith-watchdog-timeout` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0003-Doc-controller-Pacemaker-Explained-improve-the-docum.patch
- scheduler: improve the documentation of `have-watchdog` cluster option (bsc#1174696, bsc#1184557)
  * bsc#1174696-0002-Doc-scheduler-improve-the-documentation-of-have-watc.patch
- libpe_status: downgrade the message about the meaning of `have-watchdog=true` to info (bsc#1174696, bsc#1184557)
  * bsc#1174696-0001-Log-libpe_status-downgrade-the-message-about-the-mea.patch</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0001-Med-Change-the-schema-type-of-expected-and-call-to-i.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="53085b77d5f0b11878692da7f0811df1ec3d19408bbc22d5e039e255378fc977" name="pacemaker-remote" arch="aarch64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="c60dc86a03308953d7ffb88d0cc67e29815546fe1ec11f981edd1920c1d42799" name="pacemaker-remote" arch="i586">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="d84025a454d25298bf28b7aff706e4b959fda9119667bb796d956baf30ca3f51" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="2507616678412142e4c8e27c5e443d21c756a8b1b7b12632227aa5cfc080e4a8" name="pacemaker-remote" arch="s390x">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="4f4b6068c0ceddb3a89dbc97f00a9d2cf35fcfac02eb7cf37a8ce220a9f94bb8" name="pacemaker-remote" arch="x86_64">
  <version epoch="0" ver="2.0.5+20201202.ba59be712" rel="4.3.23"/>
  <changelog author="ygao@suse.com" date="1607256000">- Update to version 2.0.5+20201202.ba59be712 (Pacemaker-2.0.5):
- xml: Revert to correct schema for alerts-3.5
- tools: match calloc() with free() in crm_resource
- tools: "Connectivity is lost" may not be displayed even if the ping communication is lost.</changelog>
  <changelog author="ygao@suse.com" date="1611576000">- crmadmin: printing DC quietly if needed (bsc#1178865)
  * bsc#1178865-0001-Fix-crmadmin-printing-DC-quietly-if-needed.patch</changelog>
  <changelog author="ygao@suse.com" date="1611835200">- attrd: prevent leftover attributes of shutdown node in cib (bsc#1173668)
  * bsc#1173668-0001-Fix-attrd-prevent-leftover-attributes-of-shutdown-no.patch</changelog>
  <changelog author="ygao@suse.com" date="1611921600">- pacemakerd: downgrade the warning about SBD_SYNC_RESOURCE_STARTUP to notice (bsc#1180966)
  * bsc#1180966-0001-Log-pacemakerd-downgrade-the-warning-about-SBD_SYNC_.patch</changelog>
  <changelog author="ygao@suse.com" date="1615896000">- liblrmd: Limit node name addition to proxied attrd update commands (rh#1907726)
  * rh#1907726-0001-Fix-liblrmd-Limit-node-name-addition-to-proxied-attr.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241600">- execd: Skips merging of canceled fencing monitors.(Fix:#CLBZ5393)
  * 0001-Mid-execd-Skips-merging-of-canceled-fencing-monitors.patch
- tools: get cibsecret stash working again
  * 0001-Fix-tools-get-cibsecret-stash-working-again.patch
- fencing: remove any devices that are not installed
  * 0001-Fix-fencing-remove-any-devices-that-are-not-installe.patch</changelog>
  <changelog author="ygao@suse.com" date="1616241601">- fencer: optimize merging of fencing history by removing unneeded entries on creation of history diff (bsc#1181744)
  * bsc#1181744-0004-Refactor-fencer-optimize-merging-of-fencing-history-.patch
- fencing: new function stonith_op_state_pending() for checking if a fencing operation is in pending state (bsc#1181744)
  * bsc#1181744-0003-Refactor-fencing-new-function-stonith_op_state_pendi.patch
- fencer: update outdated pending operations according to returned ones from remote peer history (bsc#1181744)
  * bsc#1181744-0002-Fix-fencer-update-outdated-pending-operations-accord.patch
- fencer: broadcast returned fencing operations to update outdated pending ones in remote peer history (bsc#1181744)
  * bsc#1181744-0001-Fix-fencer-broadcast-returned-fencing-operations-to-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328000">- iso8601: prevent sec overrun before adding up as long long
  * 0001-Fix-iso8601-prevent-sec-overrun-before-adding-up-as-.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328001">- crm_mon.rng/crm_resource.rng: Change the schema type of 'expected' and 'call' to integer. (rh#1931332)
  * rh#1931332-0003-Med-Change-the-schema-type-of-expected-and-call-to-i.patch
  * rh#1931332-0002-Med-Copy-crm_mon.rng-and-crm_resource.rng-in-prepara.patch
  * rh#1931332-0001-Med-Generate-xml-crm_mon.rng-from-the-contents-of-xm.patch
  * rh#1931332-0000-Feature-xml-Move-resource-related-XML-schema-into-it.patch</changelog>
  <changelog author="ygao@suse.com" date="1616328002">- controller: re-joined node gets the host names of non-DC nodes (bsc#1180618)
  * bsc#1180618-0001-Fix-crmd-update-crm_peer_cache.patch</changelog>
</package>
<package pkgid="e66b892378fce9343fe1ea8d08e13963ac416f35c5f5fd65735b85db3698d739" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="c858ed13abcce5e0d7b641bd79d3cb3f81fd31f85cdecc0a47fcde2e641e9be2" name="pam" arch="i586">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="5ac4265d52ff602d434bc9ff2f2a172bc2dcdd0a676e557559aab4d423bc84af" name="pam" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="c6cb4149ccbec777ee54b9f75912c5e05fe6133dc03b270e9e2e7960b3fa7be1" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="bd3951484dba004a009648b6eb6a18a1fda95ca3442a74cb9d2d187dceb80057" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="c505c81d86ee6b079ddf91722162af2b3f020a085b23944102e2843f439ee40f" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="c40f791b6dfb37c3f25e56df740679e7769baf84681e854bf2be1115c95feb57" name="pam-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="0a645a8043ff4be55ae8248e28fe2bd55da1f007e0e6a31fc0d74498af74f06d" name="pam-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="ad796f459fe95cf720a4bf8612d1158d8520878abea2b11abcba173d1da0d591" name="pam-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="a72064da73bcb2c6d675dbed7f0b1ac60a41a8f3190604f4344630ecb306675a" name="pam-devel" arch="i586">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="9d07cdd62a14dac536fb206f05c59eae459bc920a0fed7bae357b76e9bf9e49e" name="pam-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="5e602f7eeb0e203b5c7ad645cff1e9bd2971e2e1a30c2730776d134c0d3f5ee6" name="pam-devel" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="fcf6f1bfaab60b9efd4ce716ac52f8741499aa7dd2852c632b02dc543f908c65" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="8e3e7a4d2c7ce736d8a8c5306bc1d81360c38bf7c5d4dbdd6ab63fc4dd8f83bb" name="pam-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="c80f09b00bddf3e39862c1d9b8d3c691443226a707a628eb97df81908de756b4" name="pam-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="2f29491a8f366b2b3244dff6cae4c6e72d0ace8270a2cfe54121ec986e7e5a93" name="pam-doc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="ba88d5428d068f076629833271a4a9f557bb988b6c5b7ea08d37e1ce4f55ded4" name="pam-extra" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="21598863be885c8b7f5b2bc759fe3ec8d05dce5429bbecaa85806ce246ee7fec" name="pam-extra" arch="i586">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="18a5db0560b960fafe49a064d46c06c7e18ab281b01090a0a243ef58034e15f7" name="pam-extra" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="95494a0a70c9afa8662c69ae14b630229d18eae3fc7d74ae6786f17537efdcc4" name="pam-extra" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="86ee5f4a35bfff34b239a03142a90cb7a8ae20d3b413378ce118abbb6e1cb857" name="pam-extra" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="894c78573fe64637ea8578fc632aaca4a17e002b948d588a055da30babb185df" name="pam-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="ead014c9e752ded850b0100fbcb146ec8ab3c00240ebaec68bc986ce3b8db953" name="pam-extra-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.3.0" rel="6.38.1"/>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
</package>
<package pkgid="39c8be3c2efeb93c661e8405140c26198ea004acd738370e6f5d4a3d8ea7c5d1" name="pam_radius" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="55fa321508f0a748c349d797fe5470faa384e007244f618f60080a0a51ae1aac" name="pam_radius" arch="i586">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="e04c1e110893befd86e6e8afed953a0e07b7dea15b69feed0533dc5306e6bb88" name="pam_radius" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="e37fd2a14e5b414426dc4196dc02c6a666b282d0fd521f824b0adfc92689cbd9" name="pam_radius" arch="s390x">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="cb9b91fc322a6e3db7dd2f59f63b817782ffc5bb3a0212eda962721b498f2ce9" name="pam_radius" arch="src">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="f9303cd5d86f2f041c54e2889094e7725e8252bb286168aa37a437d2782e8625" name="pam_radius" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="69682e12f1d855c812083ba1da76ec767a15fef74e60478363f7a2384f18aa4a" name="pam_radius-32bit" arch="x86_64">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="591d8ed1ff328c35ececa8c6b48166ef6210133d8e2ca8310c396611d343156c" name="pam_radius-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="1.4.0" rel="3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1147867200">- Use RPM_OPT_FLAGS.
- Fix linking of shared library.</changelog>
  <changelog author="jdelvare@suse.de" date="1204113600">- Fix MD5 support on PPC (360648).</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="varkoly@suse.com" date="1370001600">- Fix /etc/raddb attributes to avoid conflict with freeradius-server</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Update to version 1.4.0
  * The entry of the ChangeLog for this version is empty
- Use %configure macro
- Enable parallel build with %{?_smp_mflags}
- Remove obsolete patches
  * pam_radius-1.3.16.diff
  * pam_radius-md5-ppc-fix.patch
- Use download Url as source
- Remove obsolete AUTHORS section
- Do not copy INSTALL file into the package</changelog>
  <changelog author="aj@ajaissle.de" date="1428321600">- Some spec cleanups</changelog>
  <changelog author="wolfgang.engel@suse.com" date="1621339200">- Adding patch pam_radius-bufferoverflow-CVE-2015-9542-fix.patch
  to fix buffer overflow in password field (CVE-2015-9542)
  (bsc#1163933 -  VUL-0: CVE-2015-9542: pam_radius: buffer overflow
  in password field)</changelog>
</package>
<package pkgid="2652797b37832b9e3129f043ee081ce9edd8d2bdb3ec4888dde239a49d4da7a1" name="perl-Win-Hivex" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ec95187e98fe6ecf06462da4d925cfef39b53eb33344bef6e7857cfb9af3614a" name="perl-Win-Hivex" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="bceef9e209f54e5e0350adb8747e541e4738b9692e9b1ad3a9dd34d505005c58" name="perl-Win-Hivex" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="45c1093957e1764236a4660ed35874b570e023e40c196e62d6a7b699312037f1" name="perl-Win-Hivex" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ee49cabc650c8f3ba900eaa3dcff81fea516c7f1237c9020087853641ef86f0c" name="perl-Win-Hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="ff5d6cb1104c96b3b5838900d842e8c2e34e615c34eaaaeafbf9ff3fcd5c207b" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="773f65d3807fd82c9c52726ce6a4edd9a7fe9c6f4ca4c8c2305a1d8a04f0bb98" name="perl-slurm" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="748a53a4f70e01ebd0335734a0fe147b5ebbd0628549feb154e78bae3966f196" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d47ae372adf6af818a2a51c37b78ddb4b049a3805bf2d398463fe55857b6ad89" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="da1c925921912c022f9ef51ef2eb3eb788ecc636c1362911694eb84d26763a1a" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="65c4cecf4463f6a77a111497d10f3d843e29ed5b93579487db31e6ff93940d50" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dd75216a7a310a7881b0fbb26cb41c5d19a36b021e8f3838bd9a9a74531a327d" name="perl-slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d6273a423f05167d1c43a9fa22ed22da369347f30ca1db1537a84b549a410514" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bf0373a867ed717c43c814b49ebaf2ae80571fe06caaa91179da148b15b5bc66" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3c1bab2eb61897c2d6ed8b5ea42712797171789efa4e2658be3b080382aa6b9e" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33a886bf2649308f9279b96b1a95eaa310896d2621cf5497bf656f9b1de8439a" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="21d1cb2828851cf2c4d85efbd15b1fe1ded41b2df031914e6b1ab17708e99a42" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="907e752f67a8858098bc7c5c35c0899e9a49b5a78cf0f7b0c4c3269f4fe30a2b" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a04b816ff7e3ce60c7280d494f96f786ef62d35286a5f1afc98a2fc37e92deb1" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec668ceff21d9a90534b75edd90ebd8d861517b0b966cb806c0008ffa533cc41" name="perl-slurm_18_08" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f9de30e86f68d71d0a9d52139dad822fbcd9c4dd9d727f73875b05d80a072b85" name="perl-slurm_18_08" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="45216a82f277642bb9a91448e82f9e524f1e64150c503f7e0b554f519d75afd0" name="perl-slurm_18_08" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5f4c2a03628f727db29d216639c006d88a7775b5c9435df11fc1daa155404445" name="perl-slurm_18_08" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bcfcdcfc420a60238ad828d3271f9fc93ee1a82bd8e02bfeca2fae21e7a5b57f" name="perl-slurm_18_08" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6958df2584c3ab07a40042c0ddf95c3e97c0bc6c8f615817d900b650b8b6f377" name="perl-slurm_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="608229072093de6ac8d2a5a97e55fce907cee70e77b2e80a7be241c7e709edfe" name="perl-slurm_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c6d064ddcad437de94870a2dc0d298fdd0dd743335c183742256d5fd6e19b6a3" name="perl-slurm_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33e5b470bf619e5b47426e59d8fca8494e1490d9509a55c67c72bb92d1de68f2" name="perl-slurm_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7ea74dabe6b9dc7a9be168e020d7ff0a6b59611c5ef24822111ac47073c5f26f" name="perl-slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c4886d64e440cfd2c94e87cc82b0d6ae27e450db7c3636a42627f0c1feb90243" name="perl-slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2c7ab7210678f187823dd88bb1da8418a4c0c7c4a3dcf2ac6eb82282ec39aa44" name="perl-slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8b4cb890d00dcd31f62c593063b51809676c2efaa26d7ef1be80eeb90f427c80" name="perl-slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a5d2e3da1156de17f926ce33ec9660c1bceba8530d90ab5b4207cb165aeba771" name="perl-slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="12b5459b78f6f63670772bc499e8d800e675cc03cb8d986ab14a383903ecc1d5" name="perl-slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9fad8a9a8008bfa84677c70e2556dc0781721deb6829900be4f37742160797f2" name="perl-slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e3e8c16771d74cd2216dc4decacd65485bcc26e8dc12bd838387f9589a306af4" name="perl-slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e436fad547144e35b936b630b4275448f91cfd5225c591aa59e38143a72fc785" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="f22763adf9bc2dd350a532598656ee6cb7bf31f3c3bba45cc463cc05db21ab95" name="perl-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="528c1e978a77ffdbb7c2df1502a585f163cc5452e009865e8d812458620ea5fb" name="perl-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="106167a5429f885771ddd704f9e203489fa10b10a4e4fc7d3088863f3b3bc872" name="perl-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="f8768f6e43a9c046d381493cb52ee76c6c1fbd429d81aec0cb6ca8ca441225a5" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="1374fd679089c421769536a4e3562d05f7eaae231733981864d291818c124a2a" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="2af549aceba31d77deb1f52cd936030b62fd48528442e8400118a5fb4091d42f" name="perl-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="1485b7e4eeb95df529850f98f67535b1fd49220874115c86ca4d867013dffd1f" name="perl-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="9638abd99dec454a3cdcd02b00252c70652a3f44a5150cad7c11beca372c167b" name="perl-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="8b32b2b2e27359d3bfa1c502f1363e1a5bf972dbeb1fe3ab36f029c56bbdc16c" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="17df9276f7c606051291f840fd9410cdc4fc15fbb55e039c69587e7d0497b4b1" name="plymouth-branding-SLE" arch="noarch">
  <version epoch="0" ver="15" rel="33.3.1"/>
  <changelog author="fcrozat@suse.com" date="1601294400">- Update gdm branding (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1601553600">- Fix grub2 branding to better handle different screen ratio
  (bsc#1177138).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1602590400">- Move branding image file from gnome-shell to gdm-branding
  (jsc#SLE-11720 bsc#1176304).</changelog>
  <changelog author="fcrozat@suse.com" date="1604577600">- Update gfxboot branding (jsc#SLE-14772, bsc#1178192).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033600">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1608033601">- Update wallpapers and bootloaders (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1610971200">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1612958400">- Update bootloader (jsc#SLE-14772).</changelog>
  <changelog author="fcrozat@suse.com" date="1613044800">- Update wallpapers (jsc#SLE-14772).</changelog>
  <changelog author="lidong.zhong@suse.com" date="1616414400">- Replace the initrd update with generic macros(bsc#1183594)</changelog>
</package>
<package pkgid="02cf0c0a58ed8c4ac127a7e967fd0467fd0d4e97a28ece8607ab65c6d34f3066" name="polkit" arch="aarch64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="4d6cb6c8149cf292ff3021e625cabd75578e30d42abd7770c32b36abad643dcb" name="polkit" arch="i586">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="72d080e3dbed4b5b053a8cf398bfc698f6d6a022c53208281e1eca1c79d5d5f8" name="polkit" arch="ppc64le">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="44f54a7a0f450d0a5d5a3d2e64c528d7ee8fa02cdda380e633058d0333fffcc4" name="polkit" arch="s390x">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="1fb941b820201cbfe8c2510564371a83039e6a9667360820de4015cdb24b9dc0" name="polkit" arch="src">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="87886deb32f91d5378c0d241f8a21f3a55ef0e942ca016e3e9d5ee4695dfb272" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="bb9ad6d3a8c51606fc6159656e052795a7a876971737a653c215b1d7c291ebad" name="polkit" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="0eafd154e6dd1154a0e4f7b87726f10826dbd3894782b6eadf91b528f0fa8eb0" name="polkit" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c3603c3291003201824c9622b9a0d249e84183c0bdd09d6a2f902256a29143e2" name="polkit" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="c0cf2ddbf10372f83f8d6e3e48d50bcc561cf9361703355b12780d45d1d8a020" name="polkit" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="9edc376798d62aa272e3507e53ab509e34372d9a03411fe4b5a33a9f1a74f678" name="polkit" arch="src">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="74f7c8cee41923d795d9d86e550e476fff9b98bff55753b2af8dc6873075da8b" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="a70df1f67878b7f39e2ead4b2d90a1da0cba64ca13d6517f40bd7c17fb079d28" name="polkit-devel" arch="aarch64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="df822822532e96f6c30e78e6e69d6e1aa5a0df055203cadd839260a2326600c2" name="polkit-devel" arch="i586">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="bb30f7567bd6060967422f185e174ba1e15d1f0940985b733267efa0b55853a6" name="polkit-devel" arch="ppc64le">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="608716b819ce6db73d48ccc2bead237c7fca46a7e01fb615e67106a28bf56a08" name="polkit-devel" arch="s390x">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="2abb0082488443c878e9f423dc4398ab5839cc1f0ab65b3528b58ad2b37ebca6" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="00993eebf0c35db599db2a116a270cc86e4c3c408717622e8a33b2d0927d7541" name="polkit-devel" arch="aarch64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="81c7397406ebb5d12ed0086aea21d77deb3a13f5178aa951aea0980f881f2120" name="polkit-devel" arch="i586">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="6104693ba2e214fc30f3d450d2a00ea3db741902e586a01ca333b8d0b49b9d72" name="polkit-devel" arch="ppc64le">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="eebf8a83d9250d92d1480131698d2be9dcc25438515edff5ae5e9edf703ef77e" name="polkit-devel" arch="s390x">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="8fab53fac1b5de873ee61e121b45adfa81aa866d36e7604c199f6f33b30fbe2a" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="2b51daa5ee4b2c9821a15baa38cf39ced2b9676435b259832600dacb9181a1ef" name="polkit-doc" arch="noarch">
  <version epoch="0" ver="0.114" rel="3.12.1"/>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="meissner@suse.com" date="1563883200">- CVE-2019-6133.patch: Fixed improper caching of auth decisions,
  which could bypass uid checking in the interactive backend.
  (bsc#1121826 CVE-2019-6133)</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="f387b1cb37b308f5a3e8b3a95713702ce350d4aead11bad51ea36952011dc649" name="polkit-doc" arch="noarch">
  <version epoch="0" ver="0.116" rel="3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
</package>
<package pkgid="a335d39c2ef168bd848500edef5f7f68cc667961102ad3d944b956351e37156d" name="post-build-checks-malwarescan" arch="noarch">
  <version epoch="0" ver="0.1" rel="3.16.1"/>
  <changelog author="draht@suse.de" date="1399464000">- error checking for unpacking the RPM packages, write string that
  can be identified so that rebuild starts on a different host.
  Typical case: -EFULL.</changelog>
  <changelog author="ro@suse.de" date="1399982400">- skip unpacking non rpm files
  (for example zero byte files from testsuites)</changelog>
  <changelog author="ro@suse.de" date="1400068800">- work around broken file in kiwi source</changelog>
  <changelog author="mmarek@suse.cz" date="1467201600">- Speed an other improvements (https://hackweek.suse.com/14/projects/1452)
  * Do not buffer the output to make the timestamps in the build log
  more useful.
  * Only unpack packages in RPMS, SRPMS and OTHER, not some
  intermediate pesign files in SOURCES.
  * Also check the rpm scriptlets.
  * Use clamav -j&lt;num&gt; if available.</changelog>
  <changelog author="ro@suse.de" date="1479902400">- change recommends from clamav-nodb to clamav</changelog>
  <changelog author="meissner@suse.com" date="1591617600">- added an EXCLUDELIST where we can (temporary) filter out false
  positives (bsc#1172626)</changelog>
  <changelog author="ro@suse.de" date="1615550400">- try to use multiple threads by using xargs -P numjobs
  (bsc#1183460)</changelog>
  <changelog author="ro@suse.de" date="1615982400">- limit number of threads to avalaible GB mem (bsc#1183460)</changelog>
  <changelog author="ro@suse.de" date="1617796800">- and skip all the bells and whistles if we only have the
  busybox variants of xargs and grep (bsc#1183460)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1622030400">- EXCLUDELIST: Removed lvm2 unit-test (bsc#1172626).</changelog>
</package>
<package pkgid="7d4be71a72e533e9733dad6d594c8384c752bc2ca4477207b2b734490fadf5ca" name="post-build-checks-malwarescan" arch="src">
  <version epoch="0" ver="0.1" rel="3.16.1"/>
  <changelog author="draht@suse.de" date="1399464000">- error checking for unpacking the RPM packages, write string that
  can be identified so that rebuild starts on a different host.
  Typical case: -EFULL.</changelog>
  <changelog author="ro@suse.de" date="1399982400">- skip unpacking non rpm files
  (for example zero byte files from testsuites)</changelog>
  <changelog author="ro@suse.de" date="1400068800">- work around broken file in kiwi source</changelog>
  <changelog author="mmarek@suse.cz" date="1467201600">- Speed an other improvements (https://hackweek.suse.com/14/projects/1452)
  * Do not buffer the output to make the timestamps in the build log
  more useful.
  * Only unpack packages in RPMS, SRPMS and OTHER, not some
  intermediate pesign files in SOURCES.
  * Also check the rpm scriptlets.
  * Use clamav -j&lt;num&gt; if available.</changelog>
  <changelog author="ro@suse.de" date="1479902400">- change recommends from clamav-nodb to clamav</changelog>
  <changelog author="meissner@suse.com" date="1591617600">- added an EXCLUDELIST where we can (temporary) filter out false
  positives (bsc#1172626)</changelog>
  <changelog author="ro@suse.de" date="1615550400">- try to use multiple threads by using xargs -P numjobs
  (bsc#1183460)</changelog>
  <changelog author="ro@suse.de" date="1615982400">- limit number of threads to avalaible GB mem (bsc#1183460)</changelog>
  <changelog author="ro@suse.de" date="1617796800">- and skip all the bells and whistles if we only have the
  busybox variants of xargs and grep (bsc#1183460)</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1622030400">- EXCLUDELIST: Removed lvm2 unit-test (bsc#1172626).</changelog>
</package>
<package pkgid="47e81ac86ac24ca25d8883285891cf6983e4c5615804635f40faff205d19aac2" name="postgresql13" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7ef65668b420dd12d99a6e2eee4364ea076d92a4e116351283f186fbf3ad2bc7" name="postgresql13" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="969a91820a1800a5ff0d5705691def60a1e20203738490a7025dd66aafe43e1f" name="postgresql13" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="434cec9a1738d8e38e094d72f70cb0792fbe0441bdcb388edde77ebcc05d603a" name="postgresql13" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="0fb45f9f4a1f70350a43b1764a0b04ad131572524139e9f015c4af27552fc6ad" name="postgresql13" arch="src">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a47ab5296704982eb6a67e7089c5441e1c529437a1406b9ec7079fa375c594af" name="postgresql13" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="c124b6da17e9d32b6f0449494f53d6aeb82bad47b3f332e903dbec009efa0f20" name="postgresql13-contrib" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7c448600407033ce937ebeaf1ec690946195e82b8e9d68e8daf9f361429abceb" name="postgresql13-contrib" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="d7c1a85b33a60ef8b153504719e3f1c18be9752d5fa34ab68a127d8a136f35dc" name="postgresql13-contrib" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6f2962c9420f7a4a515bf6cc9dda8b453942c305dc574a31cb6b64a79a3a0329" name="postgresql13-contrib" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1a96cf65dc5b395ba34f1c71004551f6a65c027dc6ee17a2a6f84282c56105c7" name="postgresql13-contrib" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="62a8cd2a2a6eb49417c48a0a6963fe16d41b5e2270ddf901644a05ea5225b786" name="postgresql13-devel" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e3caa911908f5a2cab54a05e97a55cd4ddba20d5cfada1fdabbe96c0140599f1" name="postgresql13-devel" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="fc36e5f9ec33aa6e91a8519e167d1e93998344e8ef0f400189447097b7ad4111" name="postgresql13-devel" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a4fe344024803317878c93946bcf8d477f18240280ebd654a7df9ea82d920a11" name="postgresql13-devel" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="592133f5985de24675d2682b241c931929a1a7a880ac31e1b84b10d5bf1c8dcf" name="postgresql13-devel" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1f8ce352b62b9eae37a6082241a1c7ed5dabbfa217a1f07c910497c2cf257ce0" name="postgresql13-devel-mini" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7aa3c71c57fb8567372c37763f54a4a6b47025306c4f733a4c4cf2d32d4d701e" name="postgresql13-devel-mini" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a626f02bb883dd8d4baff6ee6991c36324c733eaa2149d5e9bbaf8b098058f2c" name="postgresql13-devel-mini" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="37e1996d3c8ee0192c8a43f8195c9b4297b6535adf8d5fe894c1ec2dec9ba5ca" name="postgresql13-devel-mini" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="5580d36115dcc1dd94df1830a4b24f2a36b0a7df28437ab1f2e8fbfa53cf3fd7" name="postgresql13-devel-mini" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="353cbe55cf2e8f37682c3b6507a1d842d388eb584cf5556cc339ced6d8dbfbe1" name="postgresql13-docs" arch="noarch">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="592c8cc7e1fb40598ae0ee421e786297bf66ffbebfd228c2614a018da5b109bf" name="postgresql13-llvmjit" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3c4dad50a2818eaa43d085f4a32d03b4a6419d415ab47e7ac3ad6510429a044e" name="postgresql13-llvmjit" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="b3d8f464376e464b9857083a488fb373488fe61d5037c86a8760d7925cc85b7a" name="postgresql13-llvmjit" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1b07aac2d7a9e622293954a1b579805f731d5e2fa226cdebf206e27d758bced2" name="postgresql13-llvmjit" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="02b90d86b65b0c0650a5f29b90a27b273f90d7278f84ce5b227d03c2d6d305d5" name="postgresql13-llvmjit" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="61290966c4e6cd5654df265a69b0891c70d58b44861a0b3f4d5eb1b20a346b18" name="postgresql13-plperl" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a30a92ee66d610b80da2d5dabf2c40537678ff62ef064f5dfc95d1762a7689e6" name="postgresql13-plperl" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9bc0fcdc0a182f707ad3f3b51574df26ed4b59ab16f2248497590a86510a3900" name="postgresql13-plperl" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="30e402e0f14542e3d76a5ed52cb5c230f51bc112d24ab02592b0c7e4edd658c9" name="postgresql13-plperl" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="70207cafcdc24519bbe538fefcbb35582bb604f429a6a0a11bbb6c1d8d57d6be" name="postgresql13-plperl" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40f22c0ed8a2a872af8ed6864b181348cd85284190ffa5bbc25b49b27656e3ec" name="postgresql13-plpython" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a1b1848891ed9b7d76e3f40c27032a7299319b7e4f7181735ac2f214b559ed71" name="postgresql13-plpython" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="ac355821d7973a5a272e76084ceac62c906ecc605d0f8f47ff941e211750fb7e" name="postgresql13-plpython" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="bf8ac0f744baf3eac74899f21714b68d3eda11f751c7bdd662ec1133622ff694" name="postgresql13-plpython" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="e43a5fa6899612dd0717ab43858583991416743276e6fb49293a73d1a3f96042" name="postgresql13-plpython" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="710e3067509a4cafa2cbed35dfcaa92fbe0e0677d72c7b476b25b8787b4702ad" name="postgresql13-pltcl" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1acab5aebeba75781d2da6fd5e449ee44dce8bc88e9e9b841ad057fdfc86cc5e" name="postgresql13-pltcl" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40ec3018cf930162d77557bae672cacf138d745eafc259da46cc3862a2afdd8d" name="postgresql13-pltcl" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="23374e13a4997c72e5680bf6c1d08459aad1fb81337e8c9199d06db049b5f6e9" name="postgresql13-pltcl" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="cb7b6c3283918cda449a2072ffe0f449169acbe874c15951f0a086378e5114de" name="postgresql13-pltcl" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9088c632cb5a94b5b084acf9220f55e9a95fbb2fb85a4d6fd064f38758990d5f" name="postgresql13-server" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="65ffc10d01cff435a8e7509f4b80a87f2427f0b247bd386f59058e2993f2f18b" name="postgresql13-server" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="538cb8866109614e2ec8f5ab747ff22341fd6ead3b66fc1a35c51df7ad1fe190" name="postgresql13-server" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="40259a7c68c4520646dd6b3941d7c8089d3876929743dac26e94868907485afa" name="postgresql13-server" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="1e0eea8159c0631e2b5e125b7814081c1aa5bc44959ac63d5eb525c18b3b03a3" name="postgresql13-server" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="008ab28a0f9ce696c510b2e76f0616f7b1795aa58f655d84cd54376a282e3dda" name="postgresql13-server-devel" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3536318b231b100239057b713e70779682184f84bb5f8c9759cf5ddb19d15584" name="postgresql13-server-devel" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="af965eb4f57ae3a046d44872915c2966d10197add69cebcdb1fabc4a6e05a793" name="postgresql13-server-devel" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="651616bfd1f48d57617ffa6f7b52c28fd64a6994eecf43beb21429314b2a989a" name="postgresql13-server-devel" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="6dae8656d0bfdfec0ef6bcc8b9ba0dd790db784c66c622c50ddb63d20ce13377" name="postgresql13-server-devel" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="9a41ccad63d4392b1e7cba1760f10bad746ddb53fdd1249298249e433302fdd9" name="postgresql13-test" arch="aarch64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="f1f7eced44de167281d9fa25ed6c5b60fa9629a9b55e5b3197ee146bbfcb401d" name="postgresql13-test" arch="i586">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="3d7d15e577bbd41812b6e71d9372b332c74d367699a39a6fc330d3702f741e77" name="postgresql13-test" arch="ppc64le">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="4666855af7bf920b9067bb0af8cb986812cf2c8c04c631ac743cb24e78d48bc0" name="postgresql13-test" arch="s390x">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="a2efd27fa7f4c86fdfd164395063b7ebfa5580411dd5150ef748904fecf75383" name="postgresql13-test" arch="x86_64">
  <version epoch="0" ver="13.3" rel="5.10.1"/>
  <changelog author="max@suse.com" date="1601035200">- Initial packaging of PostgreSQL 13:
  * https://www.postgresql.org/about/news/2077/
  * https://www.postgresql.org/docs/13/release-13.html</changelog>
  <changelog author="max@suse.com" date="1604404800">- Fix a DST problem in the test suite: postgresql-timetz.patch
  https://postgr.es/m/16689-57701daa23b377bf@postgresql.org</changelog>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
</package>
<package pkgid="7840ee2c00f03e0ad9eb267da44cd82ba93cfcc8247c3cb2eaf84cedac91a8ea" name="prometheus-ha_cluster_exporter" arch="aarch64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="1.15.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="4e626d16443a029e8148ed2e5b04c4bee6cdb5f5d88e1237f911dd37cfd987b5" name="prometheus-ha_cluster_exporter" arch="ppc64le">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="1.15.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="9dfe18ce5ba3397be22bf33b0759871adee7d32fd284dd463d69df3851aaf73a" name="prometheus-ha_cluster_exporter" arch="s390x">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="1.15.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="008f80719a69f4ffc9f004905ed5c958563eeac19cef65a345d708b8ed24315a" name="prometheus-ha_cluster_exporter" arch="src">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="1.15.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="5df32deeddf2c56dada3e12de207ee42666673d7714b916b6b5db288e646a542" name="prometheus-ha_cluster_exporter" arch="x86_64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="1.15.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="637795e9e9813133620c7243d303e762358034a22685988695f6b8ac97e65004" name="prometheus-ha_cluster_exporter" arch="aarch64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="bbca1361d5bba070456d272803c0ea3fa5128cbf7ec34a2d7ae23df00483ad74" name="prometheus-ha_cluster_exporter" arch="ppc64le">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="1b125e7f01618ac1a90064634974d241189fa27f42e96d968655b0f06e3a3903" name="prometheus-ha_cluster_exporter" arch="s390x">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="42abbcfd1c491751d6a287d5e60b1c504e6fecc30fd11da14deced4c8385d7fc" name="prometheus-ha_cluster_exporter" arch="src">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="d29009379fbdca5ff3b74ce8357836588286c3c134d61b9e53d9e1632160f686" name="prometheus-ha_cluster_exporter" arch="x86_64">
  <version epoch="0" ver="1.2.2+git.1620117406.cf586eb" rel="3.12.1"/>
  <changelog author="UTC - shap-staff@suse.de" date="1582891200">- Release 1.0.0beta7
  [#]# Changed
  - Refactored project structure by using Go packages (#131).
  - Refactored Pacemaker collector and separate XML parsing from the metrics collection (#132).
  - The open-source software license has been changed from GPLv3 to Apache 2.0. (#133)
  - The RPM build no longer uses PIE, which made Go platform compatibility potentially problematic. (#133)
  [#]# Fixed
  - Stopped resources are now tracked correctly. (#134)
  - A few edge cases previously uncovered in the CI pipeline are now handled correctly. (#135)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1584014400">- Release 1.0.0beta8
  [#]# Changed
  - Reduced log verbosity of collect cycles to `DEBUG` level. (#137)
  - Moved OBS related files to `packaging/obs`. (#139)
  [#]# Fixed
  - Pacemaker CIB parsing errors with some time values. (#138)
  - Regression in CI changelog generator. (#136)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1585656000">- Release 1.0.0rc1
  [#]# Added
  - Resource metrics now have an `agent` label (#143)
  [#]# Changed
  - Go runtime debug metrics are now opt-in (#142)
  - Overhauled Travis CI config to implement new OBS continuous delivery (#144)
  - Updated some documentation and boilerplate (3de9c59)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593600">- Release 1.0.0
  [#]# Added
  - New `group` and `clone` labels for `ha_cluster_pacemaker_resources` metric. (#145, #153)
  - New `ha_cluster_corosync_member_votes` metric and new labels for `ha_cluster_corosync_rings`. (#151)
  [#]# Fixed
  - **BC Break** - `ha_cluster_pacemaker_nodes` and `ha_cluster_pacemaker_resources` now report `0` values instead of disappearing. (#152)
  - Grouped resources in stopped status are now tracked correctly. (#145)
  - Error handling during collection cycles is more consistent across the board. (#148)
  - Corosync v3 is now explicitly reported as not being currently supported. (#149)
  [#]# Removed
  - Unnecessary file I/O in DRBD collector. (#150)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1588593601">- Release 1.0.1
  [#]# Fixed
  - Corosync membership parsing (#154)</changelog>
  <changelog author="stefano.torresi@suse.com" date="1589803200">- Backport to SLE12SP3 and SLE15. (jsc#SLE-10902, jsc#SLE-10903, jsc#ECO-817, jsc#ECO-818)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1594641600">- Release 1.1.0
  [#]# Added
  - Support for Corosync v3 (#156)
  - `--version` CLI flag (#158 #168)
  - Grafana dashboards (#160 #166)
  - New metrics for Pacemaker node attributes (#167)
  - New metrics for instrumentation of the exporter itself (#169)
  [#]# Changed
  - `--enable-timestamps` CLI flag and config option have been marked as deprecated (#158)
  - Migrated CI from Travis to GitHub Actions (#163)
  - Update and improve documentation (#164 #165)
  [#]# Fixed
  - Fix `corosync-quorumtool` parsing in Corosync v2.3.6 (#157)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1599825600">- Release 1.2.0
  [#]# Added
  - Implement SBD watchdog and msgwait timeout metrics (#174)
  [#]# Fixed
  - Handle correctly corosync membership parsing with qdevice enabled (#172)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1606910400">- Release 1.2.1
  [#]# Fixed
  - Remove Pacemaker dependency from systemd unit (#180)</changelog>
  <changelog author="UTC - shap-staff@suse.de" date="1620820800">- Release 1.2.2
  [#]# Added
  - Add parsing of the `crm_config` node in the CIB parser. (#190)
  [#]# Changed
  - Update the minimum required Go version to 1.14. (#192)
  [#]# Fixed
  - Avoid duplicate metric recording errors for non-running OCFS resources. (#191)</changelog>
</package>
<package pkgid="30a9e8020294f72ec110ba52c2f4dd7e9b0db7512815c929134f92ee015d002a" name="purge-kernels-service" arch="noarch">
  <version epoch="0" ver="0" rel="8.3.1"/>
  <changelog author="msuchanek@suse.de" date="1576238400">- Intial package purge-kernels-service (jsc#SLE-10162, jsc#SLE-10465)</changelog>
  <changelog author="msuchanek@suse.de" date="1579521600">- Fix dracut version in conflicts.</changelog>
  <changelog author="msuchanek@suse.com" date="1579867200">- Fix zypper asking for confirmation in service (boo#1161620).</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Fix typo in Summary.</changelog>
  <changelog author="msuchanek@suse.com" date="1583150400">- Clear do_purge_kernels with ExecStartPost rather than ExecStartPre (boo#1162163).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1583668800">- Set build architecture to noarch.</changelog>
  <changelog author="msuchanek@suse.de" date="1590580800">- Add split provides for upgrade from old dracut (boo#1168727).</changelog>
  <changelog author="msuchanek@suse.de" date="1620302400">- Add ZYPP_LOCK_TIMEOUT=-1 to keep waiting for the lock (boo#1184399).</changelog>
</package>
<package pkgid="e7ec2be1e462aedb4192a0a3c8cd0a0eba1669cdbfea9b051c6fa725ea962826" name="purge-kernels-service" arch="src">
  <version epoch="0" ver="0" rel="8.3.1"/>
  <changelog author="msuchanek@suse.de" date="1576238400">- Intial package purge-kernels-service (jsc#SLE-10162, jsc#SLE-10465)</changelog>
  <changelog author="msuchanek@suse.de" date="1579521600">- Fix dracut version in conflicts.</changelog>
  <changelog author="msuchanek@suse.com" date="1579867200">- Fix zypper asking for confirmation in service (boo#1161620).</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Fix typo in Summary.</changelog>
  <changelog author="msuchanek@suse.com" date="1583150400">- Clear do_purge_kernels with ExecStartPost rather than ExecStartPre (boo#1162163).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1583668800">- Set build architecture to noarch.</changelog>
  <changelog author="msuchanek@suse.de" date="1590580800">- Add split provides for upgrade from old dracut (boo#1168727).</changelog>
  <changelog author="msuchanek@suse.de" date="1620302400">- Add ZYPP_LOCK_TIMEOUT=-1 to keep waiting for the lock (boo#1184399).</changelog>
</package>
<package pkgid="5572389e7af2998c4923b5c0287dbccc591dd5c7bc5f426c4b6fff64167d085b" name="python-aliyun-img-utils" arch="src">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="bcb03f41a02d2a3dbc8f68a8139a23294ac197452d07ca0b49cc518cf175e475" name="python-avahi" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="753dea3dbd51a08ffccab876e917908b502202929d86f6d2f61055360a98ac60" name="python-avahi" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="bf2599620a86b2c3e76c7b8728a150f2ac79c720012919013b99c4ebd67078c3" name="python-avahi" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="993fc0e390dbf2af44682751897b03c713fb6db0ee4188772f1ff016412e766f" name="python-avahi" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="e51320bb5923cc2b435120b8bcf36ae15e393bacfc33ea2002fbb0607ba7aaf1" name="python-avahi" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="mgorse@suse.com" date="1468238400">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-0.6.32-suppress-resolv-conf-warning.patch: only warn
  on missing resolv.conf if the options that use it are enabled.
  https://github.com/lathiat/avahi/pull/63</changelog>
  <changelog author="dimstar@opensuse.org" date="1487160000">- Drop %insserv_cleanup scriptlets: it's been a while that avahi
  did not install any sysV init scripts anymore.
- Simplify avahi_spec-prepare.sh: OBS is well able to handle macros
  in package names by now.
- Drop conditions to only handle systemd services on openSUSE &gt;
  12.1; it's been long that we did not ship the sysv scripts
  anymore and openSUSE 12.1 is long EOL.</changelog>
  <changelog author="dimstar@opensuse.org" date="1496145600">- Modify user generation (boo#1010384):
  + Use getent to check for existing users/groups, only creating
    them if not found.
  + Do not hide output of groupadd/useradd.
  + Do not mask failures: if a user can't be added, we have a
    problem.</changelog>
  <changelog author="jengelh@inai.de" date="1496318400">- Do not suppress errors from avahi-autoipd user creation, but do
  suppress getent output.
- Replace $RPM_* shell vars by macros.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="yfjiang@suse.com" date="1525262400">- Add avahi-daemon-increase-rlimit.patch: increase rlimit as a
  conservative way to handle certain crashes referring to upstream
  commit 71ace71 (bsc#1085255).</changelog>
  <changelog author="mgorse@suse.com" date="1547467200">- Add CVE-2018-1000845.patch: drop legacy unicast queries from
  address not on local link (boo#1120281 CVE-2018-1000845).</changelog>
  <changelog author="mgorse@suse.com" date="1595332800">- When changing ownership of /var/lib/autoipd, only change
  ownership of files owned by avahi, to mitigate against
  possible exploits (bsc#1154063).</changelog>
  <changelog author="mgorse@suse.com" date="1612785600">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
</package>
<package pkgid="61f9048b43327cc9876133ba9cc70f3e1bb6f3db58de18c48fe7570f1c83fef9" name="python-avahi-gtk" arch="aarch64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="2271116880d3c348b724b2f9e8fe52a4f3f92508d46b8583fddb4a996d77fc28" name="python-avahi-gtk" arch="i586">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b9e9b25edfe8d9b586714928215a41b81c6ba5f3f9a91781f987f9b1047d2411" name="python-avahi-gtk" arch="ppc64le">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="b71a7688ac85cb52c6cfc51f21381fe89ac5e34c14c63ce7507dab1a3912f15d" name="python-avahi-gtk" arch="s390x">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="9349b4f2c00376d19807c53fbe10e057b4de1892d552e8d9f150c2f12d370dda" name="python-avahi-gtk" arch="x86_64">
  <version epoch="0" ver="0.6.32" rel="5.13.1"/>
  <changelog author="sbrabec@suse.cz" date="1229342400">- avahi-discover.glade is required by avahi-utils-gtk and
  python-avahi-gtk =&gt; move to avahi (bnc#456418).
- Upgrade protection for avahi-utils-gtk built as
  avahi-glib2-utils-gtk (bnc#456418).</changelog>
  <changelog author="olh@suse.de" date="1231848000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1231934400">- avahi-glib2-utils-gtk renamed back to its correct name
  avahi-utils-gtk (bnc#456418).</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- use new python macros</changelog>
  <changelog author="sbrabec@suse.cz" date="1268654400">- Added support for translation-update-upstream (FATE#301344).</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add libavahi-devel to baselibs</changelog>
  <changelog author="sbrabec@suse.cz" date="1359979200">- Remove no more needed gnome-nettool2.png.
- Fix paths in man pages (sed script).
- Update avahi-discover.desktop to fit Desktop Menu Specification
  better (avahi#365, fdo#49699).</changelog>
  <changelog author="dimstar@opensuse.org" date="1375704000">- Remove -DGTK_DISABLE_DEPRECATED=1 from avahi-ui/Makefile.am in
  order to allow building against GTK+ 3.9.10, which has GtkStock
  deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379764800">- Change RPM Group of shared library package to System/Libraries.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
</package>
<package pkgid="7130aa5ec1d17babbac960082c6721604f26e7730602bdeca3f310496d002adb" name="python-click-man" arch="src">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="25671da1ccac681a80a01531acbcc1f978c9d99dc8c36ed00283cca9a07a6587" name="python-crcmod" arch="src">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="1e1955fda430ef7a3d5397ab345662c707b6846b43a1b19858dcb369cfd41d4a" name="python-docker" arch="src">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="a255225d0719d0232b18c60c588c318e31eb6c09f49f88e9903af9741875c061" name="python-docker-pycreds" arch="src">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="401166ae7e7759edf2352e30ab28d5abcf40d6afab2de02afef43805bc3978aa" name="python-hivex" arch="aarch64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="db663287c1a391785c7cde6f98d5a9c58bfdd3aa42dfea805464abdcbb87056b" name="python-hivex" arch="i586">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="86dacf104f9028bf453be8d1bfb452450f4f89a54b22456f0c8724343acc2aad" name="python-hivex" arch="ppc64le">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="5e4221ee3b0c2a9c61e54831f21895901fae8764a69240546d050d7499d65ea8" name="python-hivex" arch="s390x">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="46dc4e9eeb26da08e7b56f9793c669ccec65f5655c095c4641425d3463033690" name="python-hivex" arch="x86_64">
  <version epoch="0" ver="1.3.14" rel="5.3.1"/>
  <changelog author="cfarrell@suse.com" date="1375704000">- license update: LGPL-2.1 and GPL-2.0
  README states license is LGPL-2.1 (only) and LICENSE confirms. There is a
  significant number of GPL-2.0 files in test and examples</changelog>
  <changelog author="ohering@suse.de" date="1399982400">- update to version 1.3.10
  many bugfixes, see included changelog for details</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 3.11
  * extra-tests: Add trivial fuzz tester
  * handle: Check that pages do not extend beyond the end of the file.
- Use download Url as source
- Split out translation files into lang subpackage
- Recommend hivex-lang</changelog>
  <changelog author="jengelh@inai.de" date="1426507200">- Retrieve and verify GPG signature. Resolve some orthographic and
  typographic errors in descriptions. Make descriptions more
  similar.
- Run spec-beautifier</changelog>
  <changelog author="olaf@aepfle.de" date="1445947200">- Update to version 3.12</changelog>
  <changelog author="cbosdonnat@suse.com" date="1501502400">- Update to version 3.14
- Build OCAML binding</changelog>
  <changelog author="cbosdonnat@suse.com" date="1505822400">- Add ocaml-hivex and hivex-devel as dependencies for ocaml-hivex-devel</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Rectify RPM groups.</changelog>
  <changelog author="olaf@aepfle.de" date="1506600000">- Rename Group Ocaml to OCaml</changelog>
  <changelog author="carnold@suse.com" date="1618920000">- bsc#1185013 - VUL-0: CVE-2021-3504: hivex: missing bounds check
  within hivex_open()
  0001-lib-handle.c-Add-missing-bounds-check-for-block-exce.patch</changelog>
</package>
<package pkgid="9d1d9f7415f800eff0a9a05c9085972f30d2aff049a323528d7947f309374269" name="python-httplib2" arch="src">
  <version epoch="0" ver="0.19.0" rel="1.8.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="da546a509d08ace9f7f1f6eefd322e3d4f1f419c9d563cac6ec57ca7f2f55e1c" name="python-httplib2" arch="src">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="37d9348a79156118ede22f89a33a3f7c16e179de0f3275feaf767795ff704dd3" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="51cdd1f7b1b7210f41b2409d7f63717dfa09cc99523e9bf49955a8515885d4ca" name="python-libxml2-python" arch="src">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="473140ae8c413e809cf2c926dabc579b606b2de220737e6a4ddeb10828d1f67d" name="python-oss2" arch="src">
  <version epoch="0" ver="2.14.0" rel="5.3.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1617883200">- Initial build
  + Version 2.14.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="23bea24a8d5591aeebb564c8ffb584e78ed24d688744c63b8521a03554b37e24" name="python-py" arch="src">
  <version epoch="0" ver="1.5.2" rel="3.3.1"/>
  <changelog author="aj@ajaissle.de" date="1435665600">- Split documentation into separate package to avoid build loop</changelog>
  <changelog author="aj@ajaissle.de" date="1435838400">- update to version 1.4.30:
  * fix issue68 an assert with a multiline list comprehension was not
    reported correctly. Thanks Henrik Heibuerger.
- changes from version 1.4.29:
  * fix issue55: revert a change to the statement finding algorithm
    which is used by pytest for generating tracebacks. Thanks Daniel
    Hahler for initial analysis.
  * fix pytest issue254 for when traceback rendering can?t find valid
    source code. Thanks Ionel Cristian Maries.</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- corrected homepage URL
- HTTPS URL for pypi source link
- update to version 1.4.31
  * fix local().copy(dest, mode=True) to also work with unicode.
  * pass better error message with svn EEXIST paths</changelog>
  <changelog author="p.drouand@gmail.com" date="1472904000">- Update download Url</changelog>
  <changelog author="jmatejek@suse.com" date="1475668800">- update for singlespec</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update to 1.4.32
  - fix issue70: added ability to copy all stat info in py.path.local.copy.
  - make TerminalWriter.fullwidth a property.  This results in the correct
    value when the terminal gets resized.
  - update supported html tags to include recent additions.
    Thanks Denis Afonso for the PR.
  - Remove internal code in ``Source.compile`` meant to support earlier Python 3 versions that produced the side effect
    of leaving ``None`` in ``sys.modules`` when called (see pytest-dev/pytest#2103).
    Thanks Bruno Oliveira for the PR.</changelog>
  <changelog author="aloisio@gmx.com" date="1498824000">- Update to 1.4.34
  * fix issue119 / pytest issue708 where tmpdir may fail to make
    numbered directories when the filesystem is case-insensitive.
  1.4.33:
  * avoid imports in calls to py.path.local().fnmatch(). Thanks
    Andreas Pelme for the PR.
  * fix issue106: Naive unicode encoding when calling fspath() in
    python2. Thanks Tiago Nobrega for the PR.
  * fix issue110: unittest.TestCase.assertWarns fails with py
    imported.</changelog>
  <changelog author="arun@gmx.de" date="1510747200">- update to version 1.5.0:
  * python 2.6 and 3.3 are no longer supported
  * deprecate py.std and remove all internal uses
  * fix #73 turn py.error into an actual module
  * path join to / no longer produces leading double slashes
  * fix #82 - remove unsupportable aliases
  * fix python37 compatibility of path.sysfind on windows by correctly
    replacing vars
  * turn iniconfig and apipkg into vendored packages and ease
    de-vendoring for distributions
  * fix #68 remove invalid py.test.ensuretemp references
  * fix #25 - deprecate path.listdir(sort=callable)
  * add TerminalWriter.chars_on_current_line read-only property that
    tracks how many characters have been written to the current line.</changelog>
  <changelog author="arun@gmx.de" date="1511092800">- specfile:
  * updated url
- update to version 1.5.2:
  * fix #169, #170: error importing py.log on Windows: no module named
    "syslog".
- changes from version 1.5.1:
  * fix #167 - prevent pip from installing py in unsupported Python
    versions.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="56bd7d65718d459adc2d86410c46dbe4d5297770b0e6a06adc2a7f7069adcebd" name="python-py" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="435338470fa81174bf172269a0139af6bb1167f809d1b873ea056f31a86f80af" name="python-py-doc" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="3.3.1"/>
  <changelog author="aj@ajaissle.de" date="1435665600">- Split documentation into separate package to avoid build loop</changelog>
  <changelog author="aj@ajaissle.de" date="1435838400">- update to version 1.4.30</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- corrected homepage URL
- HTTPS URL for pypi source link
- update to version 1.4.31
  * fix local().copy(dest, mode=True) to also work with unicode.
  * pass better error message with svn EEXIST paths</changelog>
  <changelog author="p.drouand@gmail.com" date="1472904000">- Update download Url</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update to 1.4.32
- use only python3-Sphinx to build docs
- provide $flavor-doc for all pythons</changelog>
  <changelog author="aloisio@gmx.com" date="1498824000">- Update to 1.4.34</changelog>
  <changelog author="arun@gmx.de" date="1510747200">- update to version 1.5.0:
  * python 2.6 and 3.3 are no longer supported
  * deprecate py.std and remove all internal uses
  * fix #73 turn py.error into an actual module
  * path join to / no longer produces leading double slashes
  * fix #82 - remove unsupportable aliases
  * fix python37 compatibility of path.sysfind on windows by correctly
    replacing vars
  * turn iniconfig and apipkg into vendored packages and ease
    de-vendoring for distributions
  * fix #68 remove invalid py.test.ensuretemp references
  * fix #25 - deprecate path.listdir(sort=callable)
  * add TerminalWriter.chars_on_current_line read-only property that
    tracks how many characters have been written to the current line.</changelog>
  <changelog author="arun@gmx.de" date="1511092800">- specfile:
  * updated url
- update to version 1.5.2:
  * fix #169, #170: error importing py.log on Windows: no module named
    "syslog".
- changes from version 1.5.1:
  * fix #167 - prevent pip from installing py in unsupported Python
    versions.</changelog>
</package>
<package pkgid="2c77ce8473417e18f4e290c070a877543e8d28d93f0da40a61fb5a54aafa65d3" name="python-py-doc" arch="src">
  <version epoch="0" ver="1.5.2" rel="3.3.1"/>
  <changelog author="aj@ajaissle.de" date="1435665600">- Split documentation into separate package to avoid build loop</changelog>
  <changelog author="aj@ajaissle.de" date="1435838400">- update to version 1.4.30</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- corrected homepage URL
- HTTPS URL for pypi source link
- update to version 1.4.31
  * fix local().copy(dest, mode=True) to also work with unicode.
  * pass better error message with svn EEXIST paths</changelog>
  <changelog author="p.drouand@gmail.com" date="1472904000">- Update download Url</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update to 1.4.32
- use only python3-Sphinx to build docs
- provide $flavor-doc for all pythons</changelog>
  <changelog author="aloisio@gmx.com" date="1498824000">- Update to 1.4.34</changelog>
  <changelog author="arun@gmx.de" date="1510747200">- update to version 1.5.0:
  * python 2.6 and 3.3 are no longer supported
  * deprecate py.std and remove all internal uses
  * fix #73 turn py.error into an actual module
  * path join to / no longer produces leading double slashes
  * fix #82 - remove unsupportable aliases
  * fix python37 compatibility of path.sysfind on windows by correctly
    replacing vars
  * turn iniconfig and apipkg into vendored packages and ease
    de-vendoring for distributions
  * fix #68 remove invalid py.test.ensuretemp references
  * fix #25 - deprecate path.listdir(sort=callable)
  * add TerminalWriter.chars_on_current_line read-only property that
    tracks how many characters have been written to the current line.</changelog>
  <changelog author="arun@gmx.de" date="1511092800">- specfile:
  * updated url
- update to version 1.5.2:
  * fix #169, #170: error importing py.log on Windows: no module named
    "syslog".
- changes from version 1.5.1:
  * fix #167 - prevent pip from installing py in unsupported Python
    versions.</changelog>
</package>
<package pkgid="dad7d8c586e8b08ff9a9624c22d3704fcc9dac94e7c34f88e4e5691316669ecf" name="python-py-test" arch="src">
  <version epoch="0" ver="1.8.1" rel="5.6.5"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="2a0bf0f7b084ecf48294152b7769d08c9ff5a8d2762973011674f9d858e53d00" name="python-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="0a04e02caea24a54dca3f16beaf50ce0e12fde6e458ae1150066dfc9d08d4199" name="python-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="fcdda18cc9f0e4bc5c54f6ac12c4ac8b7edde5c35fd4d27aa5d01aa7e05c8315" name="python-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="c5a364acda703f796414e34a8d65c1fef004d29747af25d93aff056581362326" name="python-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a4e71f43ac727131c7e3faffd47b881a7d1d171b5fc91bf6c33373798b06f4b2" name="python-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="69648e029d85036695c3e442c41db6d745c949eabab7ddb82d535c132483869f" name="python-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="488d59243351353399ed65f0aa004f0782ab30da4e71cac6f62c9cc75658d7c4" name="python-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="e2ed50029a570d428d721042b9a7ee2a7f20e75d43a6d191a97a4a1b071c5a76" name="python-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="74dbcc52a3ffdb4a55dffb327fc2826125f6e9523379a0a13636a5f79912076c" name="python-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="3490057908ba61dce92a5cbc4c1f530799df2ae1473f701a01b5685986ace038" name="python-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="682018908bcb218d444e93c49c91d2cf6cf940f032f8570b8458c1de3a2957df" name="python2-click-man" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="200da403c791df62cc689dba21dfa28f57f51f0f10c8f28391ae02feb25ff99d" name="python2-crcmod" arch="aarch64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="aa7c8bfe5544241d24fdb16dc61c6c6cf1e413fb690b9944f5a02f5284c29122" name="python2-crcmod" arch="i586">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="963c5f6a7c38f5e66150455febff698506a11b3f6ad0683653fd53eb5fb91640" name="python2-crcmod" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="5e635de99e452201c4c4d8cea278f516b5cc7ee65d8e3b83f28bd05dcb24c05b" name="python2-crcmod" arch="s390x">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="f6099032ab6527c71358773bece415bfdd90e915fd02c86a3898f7be0205a37f" name="python2-crcmod" arch="x86_64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d00fa69110afd529acb9b69cbdcc6a464af05a14c155080390dd13030418fcf8" name="python2-docker" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="16f29835503b5464deabd73048c7215217f6b7c8ad89350c56c3ad44d57c1ee3" name="python2-docker-pycreds" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="ec0249879d1f7e4e35f95c0670431da07393834a26113a3dc01c53380e2888f0" name="python2-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="1.8.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="db3c0a12db08e3be79666978fdb1f8ec9575f895dfc3a6b3098fb5e05336a3b8" name="python2-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="0d7438b251ae3ca8658d9882682665b481fc32bf946359c6a9dbc06a0d062dc4" name="python2-libxml2-python" arch="aarch64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="3633682a53c50599d0aac07113e35acd1e9f13ccd5ac0c789b34d20f62f5b124" name="python2-libxml2-python" arch="i586">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="e544006b4a28bd32c9d52d97ccc3599226aafd8f69d5c9935697674743d12fde" name="python2-libxml2-python" arch="ppc64le">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="395bd5b71e7fbad74b3c17de194c33c4daa1d58cdfc12005313ae0a08277f690" name="python2-libxml2-python" arch="s390x">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="9ea853d14a44748f817d8273444aff5b9711dd1f7a423a5766c3f2b027168d1b" name="python2-libxml2-python" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="be37a6177ebd8d29711521c2e9784b2ad05053bb501f8603eb0a93dfd01a2220" name="python2-py" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="3.3.1"/>
  <changelog author="aj@ajaissle.de" date="1435665600">- Split documentation into separate package to avoid build loop</changelog>
  <changelog author="aj@ajaissle.de" date="1435838400">- update to version 1.4.30:
  * fix issue68 an assert with a multiline list comprehension was not
    reported correctly. Thanks Henrik Heibuerger.
- changes from version 1.4.29:
  * fix issue55: revert a change to the statement finding algorithm
    which is used by pytest for generating tracebacks. Thanks Daniel
    Hahler for initial analysis.
  * fix pytest issue254 for when traceback rendering can?t find valid
    source code. Thanks Ionel Cristian Maries.</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- corrected homepage URL
- HTTPS URL for pypi source link
- update to version 1.4.31
  * fix local().copy(dest, mode=True) to also work with unicode.
  * pass better error message with svn EEXIST paths</changelog>
  <changelog author="p.drouand@gmail.com" date="1472904000">- Update download Url</changelog>
  <changelog author="jmatejek@suse.com" date="1475668800">- update for singlespec</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update to 1.4.32
  - fix issue70: added ability to copy all stat info in py.path.local.copy.
  - make TerminalWriter.fullwidth a property.  This results in the correct
    value when the terminal gets resized.
  - update supported html tags to include recent additions.
    Thanks Denis Afonso for the PR.
  - Remove internal code in ``Source.compile`` meant to support earlier Python 3 versions that produced the side effect
    of leaving ``None`` in ``sys.modules`` when called (see pytest-dev/pytest#2103).
    Thanks Bruno Oliveira for the PR.</changelog>
  <changelog author="aloisio@gmx.com" date="1498824000">- Update to 1.4.34
  * fix issue119 / pytest issue708 where tmpdir may fail to make
    numbered directories when the filesystem is case-insensitive.
  1.4.33:
  * avoid imports in calls to py.path.local().fnmatch(). Thanks
    Andreas Pelme for the PR.
  * fix issue106: Naive unicode encoding when calling fspath() in
    python2. Thanks Tiago Nobrega for the PR.
  * fix issue110: unittest.TestCase.assertWarns fails with py
    imported.</changelog>
  <changelog author="arun@gmx.de" date="1510747200">- update to version 1.5.0:
  * python 2.6 and 3.3 are no longer supported
  * deprecate py.std and remove all internal uses
  * fix #73 turn py.error into an actual module
  * path join to / no longer produces leading double slashes
  * fix #82 - remove unsupportable aliases
  * fix python37 compatibility of path.sysfind on windows by correctly
    replacing vars
  * turn iniconfig and apipkg into vendored packages and ease
    de-vendoring for distributions
  * fix #68 remove invalid py.test.ensuretemp references
  * fix #25 - deprecate path.listdir(sort=callable)
  * add TerminalWriter.chars_on_current_line read-only property that
    tracks how many characters have been written to the current line.</changelog>
  <changelog author="arun@gmx.de" date="1511092800">- specfile:
  * updated url
- update to version 1.5.2:
  * fix #169, #170: error importing py.log on Windows: no module named
    "syslog".
- changes from version 1.5.1:
  * fix #167 - prevent pip from installing py in unsupported Python
    versions.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="5cc348aae64fff736f2cf4baf68e89fe3ac4751d3191c42ff1630d26001f8dd0" name="python2-py" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="b2b40ac71ae06d60c0eb21908162884f06d3052c017cab75614f1a242929c2c7" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="bc941d5e9a0583ba22c8719463c54357fa736836871e9b159101566594b789a7" name="python3" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="1a029dfe5f3fd88c1f90369d2066456bda6be15efebd3d7348a002beb7b229a3" name="python3" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="7d2d4457d70d4a6a31418674b3d9142cca83d68745e20e0c500db259914e01ee" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="a17db121ad6bba7a62b13197388c3eec59ffc36b3b1d042126879c17e2acd05c" name="python3" arch="src">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="150a136fdb68cc2438a0d16da8abe22504022900b2769acdd825f98967feea6f" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="55d8b7176da58792d4be787f295507b29c2980d18d5789f1e098733ff00ce24d" name="python3-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e989b03e5275c3c1f1736550e2b68a03aaecae3cdebbe598f1b66b41829b5ac4" name="python3-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="33507da276ff153cacc3cff9b9180a4056d35add0e8ac5e4b8ced92340768210" name="python3-aliyun-img-utils" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="6231e746b70c5c88448fc45f73533f60a2432175a14bee91ba3a5345a1cbd619" name="python3-aliyun-img-utils" arch="i586">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="3b3c1c3dbf44c841ef8bd76a1cf434e6239f6ec8b4c1b6338e954fb3e22d4242" name="python3-aliyun-img-utils" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="1336482c83ff2ad53e36769588a3b5b86fbc869d768afadadd75925753273864" name="python3-aliyun-img-utils" arch="s390x">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d8e4e4574ee94c5cd44fa8f9fd32195c39afe1640a23c64c58f40bfce0967337" name="python3-aliyun-img-utils" arch="x86_64">
  <version epoch="0" ver="1.1.0" rel="5.4.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1618228800">- Initial build
  + Version 1.1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="e5ee34c4bacf583feb5b63f0ee3a3b6ff7d2c5a1aa0b9b28e5458acfdd903f8a" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e6037c94f0ec9dfbc06554b8723f9244165e905e82d4f08561ce6a70463026fc" name="python3-base" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="b6bfb23ce5d036033db5bd523e0696d73747079b029a68105f2ae0a12ddd2696" name="python3-base" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="4c9c750b59cfe5aec926ae7caf99fad1707879e1ecfd788e40533d011494a06b" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="764a366addb864a00ce09da36b0e31e2fd43860ee56200776b33bd8b03f3bc38" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="4c22ce51712831f5eddd79d7e49ec0df17b09191d1a591c996ea33ec3a450ec9" name="python3-base-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e548b41f99e97785cb5f1f2ed823c44b7f3fc045167caa5cc2b74a123a5c9ba3" name="python3-base-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="b084cea4c509317bd0e201f2bfdccd0e018c27afe2f83316a7867479abf68628" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.16.6" rel="22.7.1"/>
  <changelog author="dimstar@opensuse.org" date="1598616000">- Require /sbin/start_daemon: both init scripts, the one used in
  systemd context as well as legacy sysv, make use of start_daemon.</changelog>
  <changelog author="max@suse.com" date="1599220800">- Put libns into a separate subpackage to avoid file conflicts
  in the libisc subpackage due to different sonums (bsc#1176092).</changelog>
  <changelog author="josef.moellers@suse.com" date="1600171200">- /usr/bin/genDDNSkey: Removing the use of the -r option in the call
  of /usr/sbin/dnssec-keygen as BIND now uses the random number
  functions provided by the crypto library (i.e., OpenSSL or a
  PKCS#11 provider) as a source of randomness rather than /dev/random.
  Therefore the -r command line option no longer has any effect on
  dnssec-keygen. Leaving the option in genDDNSkey as to not break
  compatibility. Patch provided by Stefan Eisenwiener.
  [bsc#1171313, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1600430400">- Removed "-r /dev/urandom" from all invocations of rndc-confgen
  (init/named system/lwresd.init system/named.init in vendor-files)
  as this option is deprecated and causes rndc-confgen to fail.
  [bsc#1173311, bsc#1176674, bsc#1170713, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1603800000">- Add /usr/lib64/named to the files and directories in
  bind-chrootenv.conf. This directory contains plugins loaded
  after the chroot().
- Replaced named's dependency on time-sync with a dependency on time-set
  in named.service. The former leads to a dependency-loop.
- Removed "dnssec-enable" from named.conf as it has been obsoleted.
  Added a comment for reference which should be removed
  in the future.
- Added a comment to the "dnssec-validation" in named.conf
  with a reference to forwarders which do not return signed responses.
- Replaced an INSIST macro which calls abort with a test and a
  diagnostic output.
  [bsc#1177913,bsc#1178078,bsc#1177790,bsc#1177603,bsc#1175894,
  bsc#1177915,
  bind-Print-diagnostics-on-dns_name_issubdomain-failure-in.patch,
  bind-chrootenv.conf,vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1604664000">- Added special make instruction for the "Administrator Reference
  Manual" which is built using python3-Sphinx
  [bsc#1177983, bind.spec]
- Removed "Before=nss-lookup.target" from named.service as that
  leads to a systemd ordering cycle
  [bsc#1177491, bsc#1178626, bsc#1177991, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605182400">- Removed baselibs.conf as SLE does not distribute 32 bit libraries.
  [baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619006400">- /var/run is deprecated, replaced by /run
  [bsc#1185073, bind-replace-varrun-with-run.patch,
  bind-chrootenv.conf, vendor-files.tar.bz2]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619179200">- pass PIE compiler and linker flags via environment variables to make
  /usr/bin/delv in bind-tools also position independent (bsc#1183453).
- drop pie_compile.diff: no longer needed, this patch is difficult to
  maintain, the environment variable approach is less error prone.
  [bsc#1183453, bind.spec, pie_compile.diff]</changelog>
  <changelog author="josef.moellers@suse.com" date="1619611200">- * A broken inbound incremental zone update (IXFR)
    can cause named to terminate unexpectedly
    [CVE-2021-25214, bind-CVE-2021-25214.patch]
  * An assertion check can fail while answering queries
    for DNAME records that require the DNAME to be processed to resolve
    itself
    [CVE-2021-25215, bind-CVE-2021-25215.patch]
  * A second vulnerability in BIND's GSSAPI security
    policy negotiation can be targeted by a buffer overflow attack
    This does not affect this package as the affected code is
    disabled.
    [CVE-2021-25216]
  [bsc#1185345]</changelog>
</package>
<package pkgid="274b69a3ff70c7beeb9fc98ac18b8e0eda9a5fabe7755b964e304f16a36770a7" name="python3-ceph-argparse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4a3bc7cf8fcb0ae99d60fb764b24eef893ad9338772853d795185a8c987c85f7" name="python3-ceph-argparse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="935e4d2af79d7ed31b7cd4274733635addef92994731e639cc31f7745b8e166b" name="python3-ceph-argparse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="35bcb15733183f6a6942d10e59b407e552bdc6fe0ca65ffa7926859c906b9823" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="930a98fd6a46943a2bfe0bed32827ce5d24f43565aa82eeb06dbba1018ac28f3" name="python3-ceph-argparse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9e8477dbd1afe849ccc13fdf731fa1cf020598cff07e37d5d3e41a9f50359fc3" name="python3-ceph-argparse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="939cd95087b5730dbc31af287ef1f3b1c28ec3f202a929d0270cd9027641f5cb" name="python3-ceph-argparse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3557fbdb9cb0451153ac8e9aba198d0dec44c57ba9d855e317fcaa5dd4bc4241" name="python3-ceph-argparse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="48a2b45448813cfd0adcea85d192fb1708c02e5d8dd13b95b402a80522297e43" name="python3-ceph-common" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0aef6838700e1653a3a92db3e88708597818d78bd42a8842a49645ca75bdb0d2" name="python3-ceph-common" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2cb5943e6270a86b1eaf687ac5b5d651b6c97e48f45dfbb959d8d3a732d154b7" name="python3-ceph-common" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="42d4519531e82dc00614c44072f444317126499c6c72269bc858f825c1e1162e" name="python3-ceph-common" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bc3288e66d2fb8839692a553a779814983fe82c10c19305e43c1feccf0b4e66b" name="python3-cephfs" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2e4f4a2d5bbab845d67e090225f75fb1f9894199a0789057709817ebc8305c09" name="python3-cephfs" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4851c6f763ac38d2ad727b4cdd26381a1907294e08346ff6bd9b34401cad5dce" name="python3-cephfs" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="613ed0d03376a9ed46a83aa9b2c2ad650d4a1083f01c6366039a7d633a2b2f52" name="python3-cephfs" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ef18361125d06c86da3e1c393e512745f2267f43e7aa19dd5148127d4ada8dbd" name="python3-cephfs" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="38f3aac2c04b443909f602e38cbf23f6b84e553d09fbadd791080b07e46789da" name="python3-cephfs" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="08f367662d39715d0ad3ca77e5c7399ecc55c195df1c5c4c8a3bf68782794d49" name="python3-cephfs" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5458f12e79e2f839bc15542401c45d6df288e1430189ecc3dd397434597cb341" name="python3-cephfs" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c90575afd64b88e767f9bb1e0581f5b0192c31b749d590a8d8dffe780d33e96f" name="python3-click-man" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="5.3.2"/>
  <changelog author="sean.marlow@suse.com" date="1574683200">- Initial release. v0.3.0
- get-short-help.patch adds get_short_help_str function and
  supports older versions of python-click. get_short_help_str was
  added to Click in version &gt;= 7.0.0.
- Use pytest instead of nose for unit tests.</changelog>
  <changelog author="tchvatal@suse.com" date="1575547200">- Switch to github archive as the tests are not present on pypi
  version</changelog>
  <changelog author="mcalabkova@suse.com" date="1585656000">- Update to 0.4.1
  * Discover command if not in entry_points
- Reapplied patch get-short-help.patch
- No need to use upstream tarball, download PyPI tarball instead</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="637d98d764905bb03932605fa08dd148a38e04382cb65bd1fdaa393b6537f3c0" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="4eda4e48284b4591635584791b867bc8a77a0975212171d0f9c95335de1b09ea" name="python3-crcmod" arch="aarch64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d2901cfde919f16866ae99d8e231f125b66251c5271cc08ea1852abe59c3673b" name="python3-crcmod" arch="i586">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="e904fbca2387864b2d421e0b39706600ba450cfa2ce3ffb9c1a0c49dc1c671f6" name="python3-crcmod" arch="ppc64le">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="d4aeeb77fc65fd28452129e9522a9afedb59fc9403c8d8a49258788ab63c774d" name="python3-crcmod" arch="s390x">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="969f0c4c977a9cd6bfdf9fb6dedd625f2630a315fa149d099374f0fa03734785" name="python3-crcmod" arch="x86_64">
  <version epoch="0" ver="1.7" rel="5.3.2"/>
  <changelog author="jfunk@funktronics.ca" date="1322395200">- Initial release</changelog>
  <changelog author="rschweikert@suse.com" date="1392379200">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mpluskal@suse.com" date="1513425600">- Cleanup spec file
- Use fdupes
- Do not bundle html doc</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="1be18ea3c5508fcf1d51a0dcffbfeaa34b263b9240a652d3bb7572df35ead1c9" name="python3-curses" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="6c1a18b8d856afc51291fadb54530faf664c44ae75ae14db127020017f8b89f8" name="python3-curses" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="fb63bda753a4829b457cb6c4a58a02114dd8c7a94ad222ba7f76f96a9b1a3d31" name="python3-curses" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="8dcf726aad7284ee8d4e14f875d274077412b9b73dd1a69e4c6abcae25ff7c45" name="python3-curses" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="f798d07e80c3e6c73c9060efcc98dc83935bf1f1f09af23d578673455daced6b" name="python3-curses" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="10e2d7c3e778854cf5088e774c57d12761cbf71d59fe152ce209f1fa309f3eb7" name="python3-dbm" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="467cc581f8e4104099235addcdac66a172f37819e0e61cea5113326e7e978486" name="python3-dbm" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="243c84e0a043da5a08fc4bf60edada5256de16bcc269cdcfc5dfceb9450aa3e5" name="python3-dbm" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="7b70e38afa991118aaa5f47692d0f72989b6ab92739782c10a8a1e037fd67ee1" name="python3-dbm" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="2f65b98d211b9efe4feef9405a91f71e5db52066b0a991af58014944fc4f3e67" name="python3-dbm" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="89ea90ca0c9f4159347ec87cf196012281e561c0272702b86114bfaf61790d16" name="python3-devel" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="41eea2cf1bbb837204ba34935c97038dc6b5b23d8663f49661d5c4cc14ebcbe7" name="python3-devel" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="d36ee1afafacac7ae834cd48e53eb7ef17cf4d7a9115994bb988c8d6ee2760cb" name="python3-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="6b5a066a75f5dbc6b4a728e73af381e642bd3a67855c8fe646db73a8cc2c2b82" name="python3-devel" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="1b8a3dc0f7d0ea3369a108f9d736b552c998d678ca3ba9950689c07ba27c3dd2" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="19d1367abf39d59745af09287d41fed7eec0d22c25990a3b9bdfc21892c5d131" name="python3-doc" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="3005ae39af17fb3d43b4ea93faddfa291c657f4249da745ee82c4c7c2b3c1f7f" name="python3-doc" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="5c60b332541df46b8b4a0b47561e5a23e07334f1c3849d00fede178cc6b4afc3" name="python3-doc" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="ae14a058db0c8eb8f2a4f132cc93989980e38e4182e391b2185bea16a591f0e9" name="python3-doc" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e2efe1394c239221419ab32a24efa739c496c8b20625678f958541ecc91c53a2" name="python3-doc" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="b771582a9d62fa0e8bd8611af0f8944fe3021131329480423757df875e6f7e11" name="python3-doc-devhelp" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="aa44d29e24adfb57ebf8fa5432e8a2baabb8d5b24e97ba4d22a3edd0c7b06395" name="python3-doc-devhelp" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="163c1cbd043c9b213a42b7ea13cc540509a06d512238659e680537496baf2b6c" name="python3-doc-devhelp" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e1ee184f53f149a8402c3a1fc753412b777f164ae6e45f2c317fbbc33ca9a237" name="python3-doc-devhelp" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="c74c1716920f1bd4b8d41ff9ba0fa32e15198f842345945c03177e4c4e752da1" name="python3-doc-devhelp" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="197d0f1da1da16c44691f866c93ffc04f1c2c031e4219057b655b21f7bc299e4" name="python3-docker" arch="noarch">
  <version epoch="0" ver="4.2.0" rel="3.2.1"/>
  <changelog author="arun@gmx.de" date="1540036800">- update to version 3.5.1:
  * Bumped version of pyOpenSSL in requirements.txt and setup.py to
    prevent installation of a vulnerable version
  * Docs fixes</changelog>
  <changelog author="tchvatal@suse.com" date="1542196800">- Fix the fdupes call to match up reality</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547467200">- update to 3.7.0 (mandatory for latest docker-compose)
  * Added support for multiplexed streams (for `attach` and `exec_start`). Learn
    more at https://docker-py.readthedocs.io/en/stable/user_guides/multiplex.html
  * Added the `use_config_proxy` parameter to the following methods:
    `APIClient.build`, `APIClient.create_container`, `DockerClient.images.build`
    and `DockerClient.containers.run` (`False` by default). **This parameter**
  * *will become `True` by default in the 4.0.0 release.**
  * Placement preferences for Swarm services are better validated on the client
    and documentation has been updated accordingly
  * see https://github.com/docker/docker-py/releases/tag/3.7.0
    https://github.com/docker/docker-py/releases/tag/3.6.0 for more
    info</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1547553600">- Bump required version of pycreds to 0.4.0 (sync with requirements.txt)</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k 'not MatchHostnameTest'</changelog>
  <changelog author="tchvatal@suse.com" date="1553601600">- Update to 3.7.1:
  * Set a different default number (which is now 9) for SSH pools
  * Adds a BaseHTTPAdapter with a close method to ensure that the pools is clean on close()
  * Makes SSHHTTPAdapter reopen a closed connection when needed like the others</changelog>
  <changelog author="tchvatal@suse.com" date="1554120000">- Update to 3.7.2:
  * Fix base_url to keep TCP protocol on utils.py by letting the responsability of changing the
    protocol to parse_host afterwards, letting base_url with the original value.
  * XFAIL test_attach_stream_and_cancel on TLS</changelog>
  <changelog author="arun@gmx.de" date="1564315200">- update to version 4.0.2:
  * Bugfixes
    + Unified the way HealthCheck is created/configured
  * Miscellaneous
    + Bumped version of websocket-client
- changes from version 4.0.1:
  * Bugfixes
    + Fixed an obsolete import in the credentials subpackage that
    caused import errors in Python 3.7
  * Miscellaneous
    + Docs building has been repaired
- changes from version 4.0.0:
  * Breaking changes
    + Support for Python 3.3 and Python 3.4 has been dropped
    + APIClient.update_service, APIClient.init_swarm, and
    DockerClient.swarm.init now return a dict from the API's
    response body
    + In APIClient.build and DockerClient.images.build, the
    use_config_proxy parameter now defaults to True
    + init_path is no longer a valid parameter for HostConfig
  * Features
    + It is now possible to provide SCTP ports for port mappings
    + ContainerSpecs now support the init parameter
    + DockerClient.swarm.init and APIClient.init_swarm now support the
    data_path_addr parameter
    + APIClient.update_swarm and DockerClient.swarm.update now support
    the rotate_manager_unlock_key parameter
    + APIClient.update_service returns the API's response body as a
    dict
    + APIClient.init_swarm, and DockerClient.swarm.init now return the
    API's response body as a dict
  * Bugfixes
    + Fixed PlacementPreference instances to produce a valid API type
    + Fixed a bug where not setting a value for buildargs in build
    could cause the library to attempt accessing attributes of a
    None value
    + Fixed a bug where setting the volume_driver parameter in
    DockerClient.containers.create would result in an error
    + APIClient.inspect_distribution now correctly sets the
    authentication headers on the request, allowing it to be used
    with private repositories This change also applies to
    DockerClient.get_registry_data</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * updated pytest requirement
- update to version 4.1.0:
  * Bugfixes
    + Correct INDEX_URL logic in build.py _set_auth_headers
    + Fix for empty auth keys in config.json
  * Features
    + Add NetworkAttachmentConfig for service create/update
  * Miscellaneous
    + Bump pytest to 4.3.1
    + Adjust --platform tests for changes in docker engine
    + Update credentials-helpers to v0.6.3</changelog>
  <changelog author="arun@gmx.de" date="1581249600">- specfile:
  * update copyright year
- update to version 4.2.0:
  * Bugfixes
    + Fix win32pipe.WaitNamedPipe throw exception in Windows
    containers
    + Use Hostname, Username, Port and ProxyCommand settings from
    .ssh/config when on SSH
    + Set host key policy for ssh transport to
    paramiko.WarningPolicy()
    + Set logging level of paramiko to warn
  * Features
    + Add support for docker contexts through docker.ContextAPI</changelog>
</package>
<package pkgid="27e49a8640652895de3b57b0773b2e7f3314e91d05bc0c0296cd5122943fd163" name="python3-docker-pycreds" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="3.2.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1478174400">- Add the description
- Remove the SLE11 case</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1478260800">- relax test-requirements so that it builds on Factory</changelog>
  <changelog author="jengelh@inai.de" date="1478260801">- Summary/Description update</changelog>
  <changelog author="dmueller@suse.com" date="1487678400">- update fix-requirements.patch: drop flake8
- fix source url</changelog>
  <changelog author="toddrme2178@gmail.com" date="1501761600">- Implement single-spec version
- Remove fix-requirements.patch
  This is only needed for setup.py test, which doesn't actually
  run the tests anyway so isn't used.</changelog>
  <changelog author="arun@gmx.de" date="1519387200">- specfile:
  * update copyright year
  * add flake8 and pytest-cov to test requirements (according to setup.py)
- update to version 0.2.2:
  * Add support for docker-credential-pass
  * Add test-running Dockerfile
  * Update setup.py</changelog>
  <changelog author="tchvatal@suse.com" date="1525262400">- Version update to 0.2.3:
  * Various small cleanups and more CI integrations</changelog>
  <changelog author="arun@gmx.de" date="1529841600">- update to version 0.3.0:
  * Allow overriding environment variables for credstore invocation</changelog>
  <changelog author="dmueller@suse.com" date="1539086400">- remove unused flake8 dependency</changelog>
  <changelog author="hvogel@opensuse.org" date="1547467200">- update to version 0.4.0:
  * Add support for store.list</changelog>
</package>
<package pkgid="d910c2197c6e41fbd2586588fbc12f2dd26c0def9685ea1d428e54daeb341aa3" name="python3-documentation" arch="src">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="5d9d49121b89432bbdae89a5cf4140d96f9dcac7d58b0371684db311e40f790a" name="python3-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="1.8.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="59139916aa77e5e84cfb6602f9ff334d4a259e73c978090866f5a58956d728f2" name="python3-httplib2" arch="noarch">
  <version epoch="0" ver="0.19.0" rel="3.3.1"/>
  <changelog author="dmueller@suse.com" date="1515499200">- update httplib2-use-system-certs.patch: Also use
  ssl.create_default_context in the python2 case so that
  the system wide certificates are loaded as trusted again.</changelog>
  <changelog author="dmueller@suse.com" date="1515585600">- update httplib2-use-system-certs.patch: handle
  the case with ssl_version being None correctly</changelog>
  <changelog author="snica@suse.com" date="1519387200">- update httplib2-use-system-certs.patch: handle
  the case when validation is disabled correctly.
  The 'check_hostname' context attribute has to be
  set first, othewise a "ValueError: Cannot set
  verify_mode to CERT_NONE when check_hostname
  is enabled." exception is raised.</changelog>
  <changelog author="pgajdos@suse.com" date="1564747200">- version update to 0.13.1
  0.13.1
  * Python3: Use no_proxy
    https://github.com/httplib2/httplib2/pull/140
  0.13.0
  * Allow setting TLS max/min versions
    https://github.com/httplib2/httplib2/pull/138
  0.12.3
  * No changes to library. Distribute py3 wheels.
  0.12.1
  * Catch socket timeouts and clear dead connection
    https://github.com/httplib2/httplib2/issues/18
    https://github.com/httplib2/httplib2/pull/111
  * Officially support Python 3.7 (package metadata)
    https://github.com/httplib2/httplib2/issues/123
  0.12.0
  * Drop support for Python 3.3
  * ca_certs from environment HTTPLIB2_CA_CERTS or certifi
    https://github.com/httplib2/httplib2/pull/117
  * PROXY_TYPE_HTTP with non-empty user/pass raised TypeError: bytes required
    https://github.com/httplib2/httplib2/pull/115
  * Revert http:443-&gt;https workaround
    https://github.com/httplib2/httplib2/issues/112
  * eliminate connection pool read race
    https://github.com/httplib2/httplib2/pull/110
  * cache: stronger safename
    https://github.com/httplib2/httplib2/pull/101
  0.11.3
  * No changes, just reupload of 0.11.2 after fixing automatic release conditions in Travis.
  0.11.2
  * proxy: py3 NameError basestring
    https://github.com/httplib2/httplib2/pull/100
  0.11.1
  * Fix HTTP(S)ConnectionWithTimeout AttributeError proxy_info
    https://github.com/httplib2/httplib2/pull/97
  0.11.0
  * Add DigiCert Global Root G2 serial 033af1e6a711a9a0bb2864b11d09fae5
    https://github.com/httplib2/httplib2/pull/91
  * python3 proxy support
    https://github.com/httplib2/httplib2/pull/90
  * If no_proxy environment value ends with comma then proxy is not used
    https://github.com/httplib2/httplib2/issues/11
  * fix UnicodeDecodeError using socks5 proxy
    https://github.com/httplib2/httplib2/pull/64
  * Respect NO_PROXY env var in proxy_info_from_url
    https://github.com/httplib2/httplib2/pull/58
  * NO_PROXY=bar was matching foobar (suffix without dot delimiter)
    New behavior matches curl/wget:
  - no_proxy=foo.bar will only skip proxy for exact hostname match
  - no_proxy=.wild.card will skip proxy for any.subdomains.wild.card
    https://github.com/httplib2/httplib2/issues/94
  * Bugfix for Content-Encoding: deflate
    https://stackoverflow.com/a/22311297
- deleted patches
  - httplib2-use-system-certs.patch (not needed)
    httplib2 started to use certifi and this is already bent to
    use system certificate bundle by
    python-certifi-shipped-requests-cabundle.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1570622400">- Update to 0.14.0:
  * Python3: PROXY_TYPE_SOCKS5 with str user/pass raised TypeError</changelog>
  <changelog author="mcalabkova@suse.com" date="1586174400">- Update to 0.17.1
  * python3: no_proxy was not checked with https
  * feature: Http().redirect_codes set, works after follow(_all)_redirects check
    This allows one line workaround for old gcloud library that uses 308
    response without redirect semantics.
  * IMPORTANT cache invalidation change, fix 307 keep method, add 308 Redirects
  * proxy: username/password as str compatible with pysocks
  * python2: regression in connect() error handling
  * add support for password protected certificate files
  * feature: Http.close() to clean persistent connections and sensitive data</changelog>
  <changelog author="dmueller@suse.com" date="1588161600">- update to 0.17.3:
  * bugfixes</changelog>
  <changelog author="dmueller@suse.com" date="1602590400">- update to 0.18.1: (bsc#1171998, CVE-2020-11078)
  * explicit build-backend workaround for pip build isolation bug
  * IMPORTANT security vulnerability CWE-93 CRLF injection
  Force %xx quote of space, CR, LF characters in uri.
  * Ship test suite in source dist</changelog>
  <changelog author="dmueller@suse.com" date="1613649600">- update to 0.19.0:
  * auth: parse headers using pyparsing instead of regexp
  * auth: WSSE token needs to be string not bytes</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Update in SLE to 0.19.0 (bsc#1182053, CVE-2021-21240)</changelog>
</package>
<package pkgid="8ada00f690797b5b3b852ba687d5de4182f443a0e9182b0800cda9818234ee2d" name="python3-idle" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="cab1c2cf38bda5db260356647597914457eceeec9f852d0bfd6f1186592976db" name="python3-idle" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="d661840ca81144993c0def0b4116109fce882f6296e3e70a4a4dc72983df746f" name="python3-idle" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="715ed6c5207ca253e618e2dc45ababc5c27e302dbed08eb25a38459821e44947" name="python3-idle" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="40783aa283ad5b18eb8ea7976bea198963d7e2467faeb654569cbb4bb2dda745" name="python3-idle" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="edb47f1dbcad6dcf2447bf47cc4f86267abe2b5ef22157e39d121455440122ff" name="python3-kiwi" arch="aarch64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="454e1f3b8f7ab7a9b65c62bce40cf9ef166c38f094e60d76b5aa6f20eaac2dc3" name="python3-kiwi" arch="i586">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="bafa16975c6dbd6e054eceebc1f541324ac60bfe6939def3c9e371fdd1e490b1" name="python3-kiwi" arch="ppc64le">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="a9acd2b6ff09c754506c4204d13c95484797db4294c30088f527dda556edd965" name="python3-kiwi" arch="s390x">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="5905a6ae63c6024b441ec59ddd3b98a0e8a86a54b49b2b30adb9374315f86d8b" name="python3-kiwi" arch="x86_64">
  <version epoch="0" ver="9.23.20" rel="3.40.1"/>
  <changelog author="ms@suse.de" date="1606996800">- Omit multipath module by default
  The plain installation of the multipath toolkit activates the
  dracut multipath code. The setup if the target image runs in a
  multipath environment or not should however be decided explicitly
  in the image description via &lt;oem-multipath-scan&gt; and not
  implicitly by the presence of tools</changelog>
  <changelog author="ms@suse.de" date="1606996801">- Reference commit for SUSE maintenance
  This commit adds a reference to Issue SUSE-Enceladus/azure-li-services#255
  and the report in bugzilla bsc#1179562</changelog>
  <changelog author="ms@suse.de" date="1607428800">- Fixed validation of bool value in dracut module
  The oem-multipath-scan setup results in a bool variable inside
  of the initrd code. The variable kiwi_oemmultipath_scan is
  therefore either set to "true" or "false". A check in code
  of the form [ -n ... ] is stupid since the variable always
  contains text. This commit fixes the validation to make use
  of the bool() method provided for these type of variables</changelog>
  <changelog author="ms@suse.de" date="1610452800">- Reference commit for SUSE maintenance
  This commit adds a reference to bsc#1180781</changelog>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 ? 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
</package>
<package pkgid="f792b9ae31689bf5d750d002cc913106948ac31a7df2bc175b102985eb625db9" name="python3-libstoragemgmt" arch="noarch">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="2882cd0bd695175ce92ddb3336a2f649169627257b967d22b27281f25c30b9ca" name="python3-libstoragemgmt-clibs" arch="aarch64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="d375355c4cefeed41a10af078c11006a3d261faae16d7c95522a17c0833024a0" name="python3-libstoragemgmt-clibs" arch="i586">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="9a4d9d29fbdff28b713c206d6456d4c10dd162c9f5157de3d1066b8f0fe494bd" name="python3-libstoragemgmt-clibs" arch="ppc64le">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="1a906b10e0831a197f95bae3a93ddd6d2307f5054531893a4da81b0baa769989" name="python3-libstoragemgmt-clibs" arch="s390x">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="5fec307ec8f5cd73b243d44cee0d0546046d17d99d59a0eb3c8762b6f2a66d8d" name="python3-libstoragemgmt-clibs" arch="x86_64">
  <version epoch="0" ver="1.8.5" rel="3.3.1"/>
  <changelog author="nwang@suse.com" date="1540468800">- Update to new upstream release 1.7.0
  * Replace yajl with nlohmann/json for JSON handling.
  * Fix the file path of lsmd.conf manpage.
  * HPSA plugin: Support ssacli version 3.25+.
  * scan-scsi-target: Fix compiling on gcc 8.2.
  * Fix lsmcli on python 3.7.
  * Handle 'Warning:' message in hpsa plugin
  * SmartArray plugin: Remove the pyudev codes.
  * lsmd: Fix crash when plugin named as _lsmplugin.
  * Fix GCC 8 compiling warnings.
  * MegaRAID plugin: Fix cache information query.
  * Fix regression on SMI-S plugin.
- Remove patch compat-gcc8.patch: in upstream
- Polish the spec file by spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1541160000">- Fix RPM groups.</changelog>
  <changelog author="mvetter@suse.com" date="1558958400">- Update to 1.8.1:
  * Fix bug https://bugzilla.redhat.com/show_bug.cgi?id=1585169
- Changes from 1.8.0:
  Bug fixes:
  * Invalid vpd 0x83 value, #376
  * Fix duplicate files in debian packaging
  * Add simple test integration script
  * Unable to control some slot LEDs via SES #383
  * Numerous corrections for arcconf plugin
  * Correct deprecated python &amp; perl usage
  Enhancements:
  * arcconf pool member info
  * arcconf volume raid info
  * arcconf volume LED (on/off)
  * arcconf volume enable
- Changes from 1.7.3:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1670077
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667096
  * https://bugzilla.redhat.com/show_bug.cgi?id=1667992
- Changes from 1.7.2:
  Bug fixes:
  * https://bugzilla.redhat.com/show_bug.cgi?id=1572137
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583741
  * https://bugzilla.redhat.com/show_bug.cgi?id=1585169
  * https://bugzilla.redhat.com/show_bug.cgi?id=1624398
  * https://bugzilla.redhat.com/show_bug.cgi?id=1596731
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583763
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583681
  * https://bugzilla.redhat.com/show_bug.cgi?id=1584243
  * https://bugzilla.redhat.com/show_bug.cgi?id=1564151
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583768
  * https://bugzilla.redhat.com/show_bug.cgi?id=1583765
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1591282
  * https://bugzilla.redhat.com/show_bug.cgi?id=1571894
  * https://bugzilla.redhat.com/show_bug.cgi?id=1657407
- Changes from 1.7.1:
  * Fix up/add documentation and correct packaging lint errors</changelog>
  <changelog author="mvetter@suse.com" date="1576497600">- Update to 1.8.2:
  * Compile fixes for Alpine Linux (#403, #402, #401)
  * Don't orphan lsmd process when displaying help (#399)</changelog>
  <changelog author="mvetter@suse.com" date="1582027200">- Update to 1.8.3:
  * Fix volume-raid-create pool ID issue (#410)
  * Update: JSON library
  * Few other fixes</changelog>
  <changelog author="mvetter@suse.com" date="1590148800">- Update to 1.8.4:
  * Bug fix: #414
  * Re-work configure to be better about self configuration
  * Updates to travis CI docker script
  * Use jsmn JSON parser, remove YAJL and nlohmann
  * Make some of the simulator disks much larger
  * Introduce cformat makefile target to re-format C/C++ code
    requires clang-format</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1592827200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mvetter@suse.com" date="1597233600">- Update to 1.8.5:
  * Fix compile issue with check &gt;= 0.15.0
  * Fix travis CI issues
  * Remove problematic language</changelog>
  <changelog author="nwang@suse.com" date="1600171200">- bsc#1176448, Add clibs requirement to python-libstoragemgmt.</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- bsc#1185067, move /var/run to /run
  Add patch move_to_run.patch</changelog>
</package>
<package pkgid="acf6f2792504bb4c4d14e91e4fc1145ffafbef4ca6e97773111ebe750ba48767" name="python3-libxml2-python" arch="aarch64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="dd2cff6a23a90796c04b86121a17bca1727bc22ed17331f49ab00c05b8fa7af1" name="python3-libxml2-python" arch="i586">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="00ffb0a2d46d2cb3660d887e62b79e16e4299697250bc7596f435073f0bb7c0d" name="python3-libxml2-python" arch="ppc64le">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="ffe5e0755c42655b3923240ad47b33c6e7ad363f9a103ebce4622ac66add65ef" name="python3-libxml2-python" arch="s390x">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="77d8d4fb7738e035395bf8093bac4a13d106c04b1797f8eb77ef6af3fa09e05d" name="python3-libxml2-python" arch="x86_64">
  <version epoch="0" ver="2.9.7" rel="3.37.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1579694400">- Security fix: [bsc#1161517, CVE-2020-7595]
  * xmlStringLenDecodeEntities in parser.c has an infinite loop in
    a certain end-of-file situation
- Add libxml2-CVE-2020-7595.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582891200">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590580800">- Fix invalid xmlns references since the fix for CVE-2019-19956 [bsc#1172021]
- Remove libxml2-CVE-2019-19956.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, bsc#1185879, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
</package>
<package pkgid="7a81702c39e94f9ecfc64a2eb4c02b84fbffbc351e7160090a0cdccec4c7240e" name="python3-nghttp2" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2f7cae77d6169ebf47ba1d428e54e49dc45e999788cf2123a9c91a276dd84bf3" name="python3-nghttp2" arch="i586">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="f681ce33e26830bbabca432e00dcae7dfb702dcc7c5ac8dce9e7a310c8a12e86" name="python3-nghttp2" arch="ppc64le">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="2578ad1b13a1336470b11b1fcce95364e8ad721641c126cd76c36c8613b75bbe" name="python3-nghttp2" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="830faa7dc14ea2eb82f57271e042b8b671f299b290144d4a1f055489f07435cf" name="python3-nghttp2" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="6.1"/>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 ?Data Dribble? and CVE-2019-9513
  ?Resource Loop? vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
</package>
<package pkgid="fda7ae867da2f3b0ebab4504bf21bdfcacc7ba8e493f9142e155586ce6feb6ac" name="python3-oss2" arch="noarch">
  <version epoch="0" ver="2.14.0" rel="5.3.2"/>
  <changelog author="adrian.glaubitz@suse.com" date="1617883200">- Initial build
  + Version 2.14.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1618574400">- Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475)</changelog>
</package>
<package pkgid="41aa2f9b1e0f775df67e753163e2244693a9bcbd7d91abf02dbe05455385bc3a" name="python3-py" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="3.3.1"/>
  <changelog author="aj@ajaissle.de" date="1435665600">- Split documentation into separate package to avoid build loop</changelog>
  <changelog author="aj@ajaissle.de" date="1435838400">- update to version 1.4.30:
  * fix issue68 an assert with a multiline list comprehension was not
    reported correctly. Thanks Henrik Heibuerger.
- changes from version 1.4.29:
  * fix issue55: revert a change to the statement finding algorithm
    which is used by pytest for generating tracebacks. Thanks Daniel
    Hahler for initial analysis.
  * fix pytest issue254 for when traceback rendering can?t find valid
    source code. Thanks Ionel Cristian Maries.</changelog>
  <changelog author="michael@stroeder.com" date="1469275200">- corrected homepage URL
- HTTPS URL for pypi source link
- update to version 1.4.31
  * fix local().copy(dest, mode=True) to also work with unicode.
  * pass better error message with svn EEXIST paths</changelog>
  <changelog author="p.drouand@gmail.com" date="1472904000">- Update download Url</changelog>
  <changelog author="jmatejek@suse.com" date="1475668800">- update for singlespec</changelog>
  <changelog author="jmatejek@suse.com" date="1487851200">- update to 1.4.32
  - fix issue70: added ability to copy all stat info in py.path.local.copy.
  - make TerminalWriter.fullwidth a property.  This results in the correct
    value when the terminal gets resized.
  - update supported html tags to include recent additions.
    Thanks Denis Afonso for the PR.
  - Remove internal code in ``Source.compile`` meant to support earlier Python 3 versions that produced the side effect
    of leaving ``None`` in ``sys.modules`` when called (see pytest-dev/pytest#2103).
    Thanks Bruno Oliveira for the PR.</changelog>
  <changelog author="aloisio@gmx.com" date="1498824000">- Update to 1.4.34
  * fix issue119 / pytest issue708 where tmpdir may fail to make
    numbered directories when the filesystem is case-insensitive.
  1.4.33:
  * avoid imports in calls to py.path.local().fnmatch(). Thanks
    Andreas Pelme for the PR.
  * fix issue106: Naive unicode encoding when calling fspath() in
    python2. Thanks Tiago Nobrega for the PR.
  * fix issue110: unittest.TestCase.assertWarns fails with py
    imported.</changelog>
  <changelog author="arun@gmx.de" date="1510747200">- update to version 1.5.0:
  * python 2.6 and 3.3 are no longer supported
  * deprecate py.std and remove all internal uses
  * fix #73 turn py.error into an actual module
  * path join to / no longer produces leading double slashes
  * fix #82 - remove unsupportable aliases
  * fix python37 compatibility of path.sysfind on windows by correctly
    replacing vars
  * turn iniconfig and apipkg into vendored packages and ease
    de-vendoring for distributions
  * fix #68 remove invalid py.test.ensuretemp references
  * fix #25 - deprecate path.listdir(sort=callable)
  * add TerminalWriter.chars_on_current_line read-only property that
    tracks how many characters have been written to the current line.</changelog>
  <changelog author="arun@gmx.de" date="1511092800">- specfile:
  * updated url
- update to version 1.5.2:
  * fix #169, #170: error importing py.log on Windows: no module named
    "syslog".
- changes from version 1.5.1:
  * fix #167 - prevent pip from installing py in unsupported Python
    versions.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="f8dec9e33df95c04160e1c7a317375e43d2930137780149511b68b019711a200" name="python3-py" arch="noarch">
  <version epoch="0" ver="1.8.1" rel="5.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1527768000">- update to version 1.5.3
  * - fix #179: ensure we can support 'from py.error import ...'</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533211200">- update to 1.5.4
  * don't make assumptions about fs case sensitivity in ``make_numbered_dir``.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1540555200">- update to 1.7.0
  * use ``shutil.get_terminal_size()`` in Python 3.3+ to determine the size of the
  terminal, which produces more accurate results than the previous method.
  * introduce new ``PY_IGNORE_IMPORTMISMATCH`` environment variable
  that suppresses ``ImportMismatchError`` exceptions when set to ``1``.
  * add ``TerminalWriter.width_of_current_line`` (i18n version of
  ``TerminalWriter.chars_on_current_line``), a read-only property
  that tracks how wide the current line is, attempting to take
  into account international characters in the calculation.</changelog>
  <changelog author="tchvatal@suse.com" date="1549972800">- Drop the doc subpackage, no need for it really
- Make sure the tests are realy executed</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Make tests really pass on pytest 3.x series
- Add patch to operate better with serparators (from upstream git):
  * separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1550232001">- Make tests never fail as they are borked on pytest-4 with
  most probably no intention of being ever fixed</changelog>
  <changelog author="tchvatal@suse.com" date="1551268800">- Update to 1.8.0:
  * add ``"importlib"`` pyimport mode for python3.5+, allowing unimportable test suites
    to contain identically named modules.
  * fix ``LocalPath.as_cwd()`` not calling ``os.chdir()`` with ``None``, when
    being invoked from a non-existing directory.
- Drop merged patch separators.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1560945600">- Switch to multibuild to avoid cycle bsc#1138666</changelog>
  <changelog author="tchvatal@suse.com" date="1578312000">- Update to 1.8.1:
  - Handle ``FileNotFoundError`` when trying to import pathlib in
    ``path.common`` on Python 3.4 (#207).
  - ``py.path.local.samefile`` now works correctly in Python 3 on
    Windows when dealing with symlinks.</changelog>
  <changelog author="mmachova@suse.com" date="1620043200">- CVE-2020-29651.patch (bsc#1179805, CVE-2020-29651, bsc#1184505)
  * python-py: regular expression denial of service in svnwc.py</changelog>
</package>
<package pkgid="467945d3fdbfe3478fa7b3632d217cb687c4dd85a813c19654f9ba8a77398eac" name="python3-rados" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="41549a8e8c3ae348dec1ff5df0246339a554ef722d758dcbd885ebf39b993b2b" name="python3-rados" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="89426d6b667b02f306fae401cf063af4464f91ff407cfed3cf2bbbfbed82d6e8" name="python3-rados" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f7b0c0ca1a35b1c6dda436b9a1ef015ca3fcceba1fc90c5f74940ee5761b3b7e" name="python3-rados" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fc669e96214ed0e57eba620956aee9d81362223e0a204e127b0ee42096713d03" name="python3-rados" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="cfe115eb133a9b95c81aad836907b75a3e0680ad8d3d99c8e5f4e8d11a811204" name="python3-rados" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="822533fa7523823b162c597d07c0e8c293fff41747da4fb5ff23a5ab3e7a9dc0" name="python3-rados" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3194d0f6a14cb03bd144494b22c7a3f784655104da3e5a08ddb06f5fe918611e" name="python3-rados" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="3fc50611c69a4d14cfaa2def67d65aa974e764e9e0ef27ab18033169b5b3cb7b" name="python3-rbd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="bbd45634c02bb0dcc81ab1bb24a9ef9e279c92185e792b9c76137a877109d4f7" name="python3-rbd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="63aa4e227a92c730f6189875332a35f1f90ac8e48df7c8c53b192a7e23a1433d" name="python3-rbd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="20e86546854a8ef813c92144eb38d8bfed0e6fdc7c17bfe56be93b54f14e2025" name="python3-rbd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ae8e2465c31a9ed11d939aef65df678328e2caee9d6bb544d1935b2f606eb8d9" name="python3-rbd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f1ded28a0703b38cd7a202add67cd5d75135fadb4d8e9c36538bffe273272441" name="python3-rbd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4ce8f579afc3a851639bef628839c402a2dd771aa45271ed7ef7b1002a45b781" name="python3-rbd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="09f9428305bfc178293782dd0f1a637a03727a6975ba0716719e9b48efe304d2" name="python3-rbd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="aabb48caa55734f6ff5f4c5dd1980f2b5b995a8d032331500b26d5229381ffed" name="python3-rgw" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="a6ecd588c0dfe48ef4e79b134afbaf4e460cd92c358fc391c8b189a72c4dab0a" name="python3-rgw" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ea3f699823e8a8e69ab608e1191120c45a909c6e2a51901314a36825afaa8d8b" name="python3-rgw" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d7da93c77743c3150202f78fac780f835436982931af356da30cf5a2aa86f307" name="python3-rgw" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dd7a3f5bcfaa7b75d8577de22fab6907b0b25b26690efcbed7e30844ab3a2b50" name="python3-rgw" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4094aeb560a60d0536de6ee94f221841acc71b7097c1a9e8a21c6cc85b36d585" name="python3-rgw" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e0147d4b813cbc98d09e4ac408a6bb77f0a2f7a400737c3e0598e21068d1b170" name="python3-rgw" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="c5dbfecb255344fbfe544c37106763626cf4e3dd55ce4a408c1c5373edb2756b" name="python3-rgw" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="d2647173190d100d0c103ca44ebd231f54aacc7b1e8b9981e3d1f0e3ba8f6e39" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="09e75b8a5d8f15b79f079f26a1382ab1a645faa86c8a080bb123a679d43cba07" name="python3-salt" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="b632df7a930960aecb4f94565703dbe2336f8084d6c4ab38fd784abd688d50a8" name="python3-salt" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="eed6a7834665433f4ba5849f093562f224f1b0db67344eb55dc7df3729a18458" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="39088ff4571941d8e5aec6675b24d64037716844fd1359c17ec4148e6cb25c69" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="347d5a0d1e36845f47c0fb0d404d7fd992a562308e61b91fd6dbade23806cf1b" name="python3-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a6f39ff0e6af17c1d9b7b609f498fcdcce08b73cad86dc26704f4ba119009ed5" name="python3-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="d509eb6e4402c670a46f3249562c138ec2fb9254d5d57461ed22dad4e1a8830e" name="python3-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="b9c32ece1436f2c7db929e35076c76c9297f4596437655dc560ccb21eed3991a" name="python3-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="bfbf069cbb0aef3603d9df5218070f7606b1ec0ad25cc74efcaf41200692b873" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="9c33994eb04f8881bbeb8ca73664cb1e244db61acb778e67fadec2a8144aa7a7" name="python3-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="b4fa68884b07b0471b9dcc2b1022d01f3107cc24317e22a0df695c0c64a709f7" name="python3-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="a05ca2da155d8fb51a54bca24aeb6c1be9cff77185589b5ecdd5170a610c4a45" name="python3-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="01d6beb68df1ac1e58b105f8450e27df482faa31899818d654d346948f643346" name="python3-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6f0ef78b3e93815249f585bb10febb8a58982ee296f89ce1bbe12e62906adecc" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="27f8e17dc012f43f78263b96d26e62e48aec89f82ce48062a9d48bb6f03a5083" name="python3-testsuite" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="f58e3197a68820c169770ae96369dc39d27f923fadf30c26e9700a0a551aa347" name="python3-testsuite" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="993e6f2d28cc93940543d92c23a4c52388d297dd2dfa8c0b1e9b72785e5db3bc" name="python3-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="3ab8d39ff5cb0ddacf94cc95e9c11fe9ffcddc80da35b13849eebbdfed39cb55" name="python3-testsuite" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="d7c8436627fb16a391381387058e3d0eb6144d4cf5a891425db5285dc951b05b" name="python3-testsuite" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="0d1620e8e8c70ef6547b9b0f50196a1eea1abb9d751b2136d65c13f9f931b0ff" name="python3-tk" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="ddfff8f29a955faa8c39d26b912876c705c1659b62f72164be16b75a83ff7798" name="python3-tk" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="3ba5fe843b6b3e7718078bfd97aea26181a9b2b2db67c73c7a1d22f7e127c116" name="python3-tk" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="cced547db7d300a7d9a3a47fbbde1d149af7e65c9f48888f0aed6999a951afdb" name="python3-tk" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="e1fd8676993763f442e06b6202bd15519c082a6402d97abbd7042338fa66365b" name="python3-tk" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="dca31654b9d8001d0cfd3942a7082ceac3b4ff396e4a3ad8ce861ab5d3d1ac27" name="python3-tools" arch="aarch64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="9c014e8fe5b0e347c7ce143a9f401aa1d32c93761d748062eb10583134fc53d7" name="python3-tools" arch="i586">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="9639257dc67fe7ea4251cb8b56d97e6226ea5a09ed322c6145f4331b0eb75985" name="python3-tools" arch="ppc64le">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="b0b0ba84ebecb5bbc75fe36f57af6d5af682a5c595fc2bf460899990e6c966c1" name="python3-tools" arch="s390x">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="5a63a8f59b6e6a751f845fae28213a5cd91c14d0e863c3d5d74399dfced12ddc" name="python3-tools" arch="x86_64">
  <version epoch="0" ver="3.6.13" rel="3.84.1"/>
  <changelog author="mcepl@suse.com" date="1606824000">- Add CVE-2020-27619-no-eval-http-content.patch fixing
  CVE-2020-27619 (bsc#1178009), where Lib/test/multibytecodec_support
  calls eval() on content retrieved via HTTP.</changelog>
  <changelog author="mcepl@suse.com" date="1607169600">- (bsc#1179630) Update sphinx-update-removed-function.patch to
  work with all versions of Sphinx (not binding the Python
  documentation build to the latest verison of Sphinx). Updated
  version mentioned on gh#python/cpython#13236.</changelog>
  <changelog author="mcepl@suse.com" date="1607342400">- Adjust sphinx-update-removed-function.patch</changelog>
  <changelog author="meissner@suse.com" date="1609156800">- readd --with-fpectl (bsc#1180377)</changelog>
  <changelog author="mcepl@suse.com" date="1611748800">- Provide the newest setuptools wheel (bsc#1176262,
  CVE-2019-20916) in their correct form (bsc#1180686).</changelog>
  <changelog author="mcepl@suse.com" date="1611921600">- Add CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch fixing
  bsc#1181126 (CVE-2021-3177) buffer overflow in PyCArg_repr in
  _ctypes/callproc.c, which may lead to remote code execution.</changelog>
  <changelog author="mcepl@suse.com" date="1612785600">- Resync with python36 Factory package.
- Make this %primary_interpreter</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">Update to 3.6.13, final release of 3.6 branch:
  * Security
  - bpo#42967 (bsc#1182379, CVE-2021-23336): Fix web cache
    poisoning vulnerability by defaulting the query args
    separator to &amp;, and allowing the user to choose a custom
    separator.
  - bpo#42938 (bsc#1181126, CVE-2021-3177): Avoid static
    buffers when computing the repr of ctypes.c_double and
    ctypes.c_longdouble values.
  - bpo#42103: Prevented potential DoS attack via CPU and RAM
    exhaustion when processing malformed Apple Property List
    files in binary format.
  - bpo#42051: The plistlib module no longer accepts entity
    declarations in XML plist files to avoid XML
    vulnerabilities. This should not affect users as entity
    declarations are not used in regular plist files.
  - bpo#40791: Add volatile to the accumulator variable in
    hmac.compare_digest, making constant-time-defeating
    optimizations less likely.
  * Core and Builtins
  - bpo#35560: Fix an assertion error in format() in debug
    build for floating point formatting with ?n? format, zero
    padding and small width. Release build is not impacted.
    Patch by Karthikeyan Singaravelan.
  * Library
  - bpo#42103: InvalidFileException and RecursionError are now
    the only errors caused by loading malformed binary Plist
    file (previously ValueError and TypeError could be raised
    in some specific cases).
  * Tests
  - bpo#42794: Update test_nntplib to use offical group name of
    news.aioe.org for testing. Patch by Dong-hee Na.
  - bpo#41944: Tests for CJK codecs no longer call eval() on
    content received via HTTP.
- Patches removed, because they were included in the upstream
  tarball:
  - CVE-2020-27619-no-eval-http-content.patch
  - CVE-2021-3177-buf_ovrfl_PyCArg_repr.patch</changelog>
  <changelog author="mcepl@suse.com" date="1619524800">- Add CVE-2021-3426-inf-disclosure-pydoc-getfile.patch to remove
  getfile feature from pydoc, which is a security nightmare
  (among other things, CVE-2021-3426, allows disclosure of any
  file on the system; bsc#1183374, bpo#42988).</changelog>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
</package>
<package pkgid="93d22ad6838a1c9189b13712786932048dac9517b644d07edd7a80265e25d5f2" name="qemu" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="aca12b65da383c8dcc3ed548b0f2d46ffbbfa86865958c8a05207d94c3b984d5" name="qemu" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="3c1d314150d99a2f87bdeb8262936aefd63234f9a0c444ea08661ad863dfec8a" name="qemu" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="21ccf362fffb1923e13ef9473bc2698fc054ce85b8dd2d8f5e9c24c96780a88a" name="qemu" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c5bd82f7035cffe1719b26731694dc1df7a6ae4ad9d67928ddf81e28ac848b68" name="qemu" arch="src">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="452eb14a266d384f21629e88f57c8a511de824ab39be37a210c93fed8a1b9948" name="qemu" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f84a2f6e11248c445345214da11a17ea9102799e6e42699b31f42ed29a45b3ec" name="qemu" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="7f0c6884db9b5c0935684158bd618a22c315c524f066180fe59552ab017cb4d3" name="qemu" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8f65c15826855a69a10d19cadf65531d95cbd9bf5ff1c4b646854b918d2d31df" name="qemu" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="530727bfde5bad9ebb047a08847ca4450bcef8b4761955b41a72a299a4e8223e" name="qemu" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0444030a0a8450c2398939bc7b0a4624ba0576596d9303c2a0dcfc4070ed3684" name="qemu" arch="src">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="215d29a7d5e612cbe23bd6fcdcfa19e36734c37378be639214f1c16df7b307ce" name="qemu" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a6b71be6f7830df9a30faa995de5e9a222d1a34e4ad81a65b4638408605d8f57" name="qemu" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="144dff44be3e65d060073d5ec988e6e754638ecb5680f9aa00f14fb6cfae06fd" name="qemu" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="ab3abd11d39d71125c7106897d594e3fccfb14a58b124c91e6166d0d713290a6" name="qemu" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="b5fe6f7e01d91247ddc7a8c5e3bc1f8af4094a5c87fcd93feea1aff506d94cc5" name="qemu" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="f61bc6511e3f361bb6d092178a849203c78aba1006d0de46a9558dc99b41f787" name="qemu" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="7b8fbab1ac46d81a9f03b1ef29e6d257fc037e03079c1da5fa284ae193ffce4b" name="qemu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4cea9e1fcc8c28bf27e35d7660bb9287828872f53365dcc5803522d7d3a3583f" name="qemu" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="26b70e150df265b12c0afff0e1a971f55eae2a4e049bd1e5b0ebe55e44bfb9be" name="qemu" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="49fd045ed4fe5d10652c71b8c4974bb4382fbb91f15d6f7d0e2b0bd87d124a6d" name="qemu" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2c1ad510647e71fe8740d590dead3a207b227b77f8632f55474c8b7b546e4b0f" name="qemu" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f4bc4ede045a2bb0d259f9db16a8e99a8415d061cbffa090906e57ce8203b453" name="qemu" arch="src">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="61e3b20ab92fdb02a5a40b250cd4ef9e43ea3d8f865320054a4621f840a4cb3c" name="qemu" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7293850fd85f236d02dd4f68152d73fd663b9eeabc52e141be296a867a655f51" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8727fd622d9e1b9078cb7c9fe3d6bfa9973cf7315ee3055f7a35403e5bedce56" name="qemu-arm" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="106b2f4a38c3f9159467749c68d8f95e5d435ddeb8d8bd7a2e584ebcf8322c7f" name="qemu-arm" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="03d3a9810a588059e3e9e87470d658764c65899ebf47653ac24aab5db78e92cf" name="qemu-arm" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="936a3b8e0db9fdf77802e323ce2d787041af095f0c0a5ce7ba3787d4749cac57" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="264c730330f1be9e52cc20a256fbc33e790b5d9eb0fa3e128bd122e6c3cb1e85" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0996d66e4038de3596beb6c2a7263632d3cc15c227827cf565a583d9f293982e" name="qemu-arm" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="774d495ac7579c8fa150d650b8526bdefa6828dd1371ce60a0533d80d0185354" name="qemu-arm" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a2b856144bca0bddcddb3a83e48394edc693c582c654b19ee901d5e53ded5d05" name="qemu-arm" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="aa03165408d96f41eacee1ddf8f820a76b7263a1d51d17ef6df28b32cf25fed7" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fd8b524ca8068c90c64f6cbecad821661e5d278933c365b1b923504d44fa7046" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="72f81a3e1835e23675ce701df1cecd0d50730c2cdb66a018d6156df9c681e8a8" name="qemu-arm" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="46ec952e1f25087d33babdb1f0ebd4d4dfc9db08c68f6a6abb09b9213da1466a" name="qemu-arm" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="8e5f54755b3643c1c2e4933c927e9fdaf3582df1ad148ee51ebeaf33e563ed6a" name="qemu-arm" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="137adc57e3f665669fb17570f1636268ab012d7fb5eca9b529d02936e4aed873" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="f760c44a176da3a778c2a9ad88922129987d983f2b6869f8925c335497371c40" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d50f53500a2dcc577b2e63678278e7ebd7a24255e3e4515f55866e548eaa23d8" name="qemu-arm" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="de7b24a197140bb399d1df4660ea6242fcb8baf1e78205aa09b1adf3981d7032" name="qemu-arm" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9fe0221c9de78cb781ad3f38eaafc06756485620b423648eeac2bab44f058e5d" name="qemu-arm" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="de1f548e380dcba709d445ed236e704eaa9267eaf97d65b5bd1ae1d18fd09ec5" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ebee1da52d5ba5ffcb44d701fe0f14253716fced56b6ecd153f2703fee8a65e1" name="qemu-audio-alsa" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4b97349c65c9bf12396453f85dab545cc0b734563bb4a911752bf2cb8a8c4da9" name="qemu-audio-alsa" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="86f4ab0a585926db1cdab3a3b443d63388ab5fe6f73a4d7817e902ccd014fe9e" name="qemu-audio-alsa" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="1036f40320245d4a406683579119aa071e865c3d552136395a30358e3c6f7106" name="qemu-audio-alsa" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="3073fc3870b203a55059e5d5a54625d387b51f6d8a8db888d0372a144763dc0c" name="qemu-audio-alsa" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2deea3ad5bf8b28aedc4e7c8a85f5954efe0d2dcdaf17ab01ccfc53a19dca11b" name="qemu-audio-alsa" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="b84cbe5e9193cbf00feced572160d40eccc89d23bb2008abc21d92f41b699367" name="qemu-audio-alsa" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="57d76c7370ecf7d1cfbdcfa10ef9d39b004e7abece3933b17ab200c81860f72a" name="qemu-audio-alsa" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d6f3a2bd06f46d90cee67d3c461a1605021cae649b55a33eea182ae8a2574357" name="qemu-audio-alsa" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="23fc2d276ebdd96e1f79ea2be6d2279477c63e4e884fe2cfa065b27b57557c32" name="qemu-audio-alsa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="28023942cd98560ef65f9bd204cada3a5a74713bd3278f7777b0f9ec8cfba8f5" name="qemu-audio-alsa" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9cd07260bb45402f54f409881881339bde109e88c9e0d311715075c0b966b548" name="qemu-audio-alsa" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="37584bb3c5f45733f5452bee28c140b2a03950381df3bd7a4d9c64b310ddf253" name="qemu-audio-alsa" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3c1d07797cef5fc3ffbdb432a9734e7c639f244f5bedec7af0c35a5ade832adf" name="qemu-audio-alsa" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8b5f4c4e647ac7eb51c6ffed5048957fca97b82c76a62e4e29432b5d85ac26b7" name="qemu-audio-alsa" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ab74c87f79bb105f75785b393d8cef87618dfe011c67550ac68f5231e3bbc9fc" name="qemu-audio-oss" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ed7e68021e678847e6ab4ed583d2f8528235c9e06c474d7e4643055fbd7f49e5" name="qemu-audio-oss" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0d8ce629694fb15b389139477751e23d9513465f9f316677d09a69860c0d24cb" name="qemu-audio-oss" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a612f700cbef109a90453cbfeea708534904ffbd8a886303a698e10415c55e95" name="qemu-audio-oss" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="daa800698e489bfd0b9e5fa2cd4e8b03d557aa13855b2e58431b905daf895a33" name="qemu-audio-oss" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="66f963c9496257f0a8b5b9321b6b6d5b7379b769adb7df1ca97599ec2634fd8e" name="qemu-audio-pa" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0f38ef492fa55a4f61cfa31910c287d3b837efd6c861ff72bd2fc765fe1d7bda" name="qemu-audio-pa" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="86e8214ba8ddf2a6a55afa33a1dee1e5dc91e65558f15a7c02a0f425daea5add" name="qemu-audio-pa" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f0084a02d0d2def09bb1972bd1dfeb1da4fb05ca2b936c7beecb7485d9578e1a" name="qemu-audio-pa" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="1e60504d157a721732d86950fefdef75be6823615d4e7c5983c3509dd2fb6fa8" name="qemu-audio-pa" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8029a7e68d965def3a2b6c511aae47f039fc27fbcc063681150a239f87c78654" name="qemu-audio-pa" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="380e921f68cca0b12ba7717edd42992de83d408b514a9abd26ff714d48ab8528" name="qemu-audio-pa" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="bfa732994b211856a6eb3c1f487f67fcde02ee90ae1fe7b8aaaa47a6cfacff97" name="qemu-audio-pa" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="9961b1cf89f37b8e298156ed9b13128d3145a0598d041b20f97a2b3f8a613206" name="qemu-audio-pa" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="fd303d5312eb9e09e1c4c4da24e7d7eb6721615c7fd8ef5319e13c6e17b1f685" name="qemu-audio-pa" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="b2ec0dde9ba406dde963d42a8e4dad20dc6769de01eb67f1fe95882f0bb35533" name="qemu-audio-pa" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0cb1360f2ee20cd52af30830ad4a2589597d567376e112d12626c2cd06c0f6c1" name="qemu-audio-pa" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="358c18bbcf5bf7436d029c7c2d015727a360e46c13d5d4dbc80718be39c37601" name="qemu-audio-pa" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e804a7588242eba5b07d541c3aa5407e1b5a1300537f067da4264e91e5b81c67" name="qemu-audio-pa" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f6a1c9d08f97058de8a56ca6e325909b49ac061ea680fb0bd46b42d0d124a3ac" name="qemu-audio-pa" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0a3177d47fe29190b98944eaedc89541db309fd0434414415d5cb459d50c5cb5" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f6a4b4f9279a7183606d1534e2f24d5c602fa0dcc6f5881097e8cb8c344751f7" name="qemu-audio-spice" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="dfb8d3c1f69ed1c74cf52061743e1d154aeb2ba25202c845ba12fa49b48e7ece" name="qemu-audio-spice" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="099542fcc9fa7b638e199b5fbfd2b8a2ddf4a46f09bcdad28bfc0d1d538ad6ad" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c52b2a5bf30c3d67dd3d4938d28da3d293e1ba210b152faa1e027ad6e51fde69" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0cc83172e3c702bf809d5a793a28a6e60dfae41dbe35b3b39aed34818dfb5008" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e481569d05764d3fbcb92e2314b6f3855954359f1c66ac21cf3e49f88cc972ad" name="qemu-block-curl" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4c62b01d1240af2f7dc21b2d4f12b0a46d69cab19033d99f21eb3f672ce433ff" name="qemu-block-curl" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8c5bf64eac40d55981b5d9bcd7303deee30058695a85c3d090d5735e256fe887" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0b3ac8c7fecf923a70aaa6b43507bde27b70bc6e7611032a5b27d16248d174b7" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="110ec961184cc117c3757dabdd791d3063b8442d88a63f08b188086e040935aa" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c03ada5b5faf34d1296f5c4ce8e4994c107c0b20a67dc76243939b8c5b82f801" name="qemu-block-curl" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ef34644db8f89a2dc3e973e7f326bff5b735417c4c8e14ea5c71dd8e3fa1e0e1" name="qemu-block-curl" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9405213d638d83c8dc1f33fdd25872f9275310dd9f9061d373d6d26023d37302" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="75005261916d97f83f432310708e1bd1a248e56427d075ab8ec785dbcc02a39d" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9d0260df7f6a954c25262025fb8ee93c352dc71fa2a3eae95b17426c7677a696" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d2d76de7ff33f1646f4b14454986ee96d9127390c5795de00bc624759ac03dba" name="qemu-block-curl" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="0a5d3696dec366fc4de15586ea06f021482098da96c0dc316d6e73d05bd84ebe" name="qemu-block-curl" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2830b67a6ef47858e760be40bcde09787675eb7f1d29e0d3b9cb7ffae3ab174f" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="86867c5e1bf725b915b00a91d9b69f82a57605ac68978dbab4e65dae52119946" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4683c51fbf3caf08c52fa5c0c3380d4c6e783f270da06438dd14ed67cef764cc" name="qemu-block-curl" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7103941bf3bc23d715198c061ca94199709248e707d048d34411376c8b59ba10" name="qemu-block-curl" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2f01a5dd87c160cae0ab49a530275f46bf2e8d078a36cfe97dfc9da39224b7b6" name="qemu-block-curl" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="68d1b78152604d334cd87ebc796f6b84ceb35e662f3603baebbc14aaab961691" name="qemu-block-curl" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="68930cc31b78fa03496735f3610e03fbef8a49f83efb7f470bdb087e862dc3ba" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c325dc25bf583e6a0ca83756654b72f0aa4d0210764f5be8be7372f51d3e4672" name="qemu-block-dmg" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8c1b62902e069c64548f912bf5ea3750333c42ca65261b86c5fb2571faf32621" name="qemu-block-dmg" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2606077208f5890607d349a954dfd9ff5a787adc430981e234fad44694d93355" name="qemu-block-dmg" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="943ba89be4549828ce4fc0eb751e9118c494e41a93e3389eb365ef6d1c26bdfe" name="qemu-block-dmg" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="7844c0e21e98c647128704928a2fdad1ce2c0b3ad09b17a1306c5f331f2c94b2" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c94301f2178db211746e624c4d691fc15a413fe6209073bee7f93c63d5d06b67" name="qemu-block-dmg" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="49fd2960ba25f1e0363b629c714aaafd28ec8c685d6ccb09bbb00b25d05655db" name="qemu-block-dmg" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d4458e683f17f9542f9763c1c291f3f4a90c4d80f70c7e4a8029f59c71432ff6" name="qemu-block-dmg" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="74adad539b1fe48b2863d3fad79194cacb3d2f4edb0b26da8393d619e3100a9a" name="qemu-block-dmg" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="b3f7f531e67e1af590961c864cc682af040dd630ef2bfc4a04ba30791b16c0eb" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4f6e792eaa7f358156ea23ab4d49d00e9ee1cb6a15a93bc740e5e74f0a85ca5e" name="qemu-block-dmg" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="61ed5dfc9ac2becf2da9b5d87e667bc6c2c52cd30a3b7cae60dc6fac0dee2dca" name="qemu-block-dmg" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="970a37d246837d63e341b473346d9ca1c67d4665a29223ff900f88ee07ec64e6" name="qemu-block-dmg" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d0e1a019033b8174094d2723d83c6eda6a3443f62a2e09afc26abceb3cb98f78" name="qemu-block-dmg" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="e535dcb6d245768bb5a85fca00f7174faf11a6b349b996b0a1def0747763fcdc" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="a11cb9ce4d96bce41f49ac0ebc188be51b43254eda7ec3a2717fe1c07341d710" name="qemu-block-dmg" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="937cd829648405cc977a1da3af37cc47243606baaae07cdf564de678ba4650b0" name="qemu-block-dmg" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="5fb9b6d14f11aef1c76ed96626a36d1e4b48e0c7170e422834d92e0f70badfb7" name="qemu-block-dmg" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="34730655d33ea8468db714a99f32f0b5ac9b22fc650c21ac2048d27b97c9b864" name="qemu-block-dmg" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e2eb1f89b9789d8553f0fb77f8f748cc5a5fa3ffe095b1bc43a4c6dfef843796" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3271f562846c8b6245433b3dfe5eaaaf0777563800d16b487740c8749744cc6f" name="qemu-block-gluster" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="41988ac54ea5f6659710cecace6d89c72e4c1d2030c9ce5514fd30d6a6b463ab" name="qemu-block-gluster" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c57cd4c63cde8741460d05718324b2781bb33ec87438257594afb827f4d96b51" name="qemu-block-gluster" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="471efc07559feb8a10e5f90169e2edc21f1b766667126246008bd7205da58812" name="qemu-block-gluster" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="b047bb2d52ecfdc8c1fe930ccab5224ba4f60ef7ffcc52cab5c5360c6b305dab" name="qemu-block-gluster" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0fbbed3a425405baf2f9342bae44442f7062e02d3945e8b08367a6c11700aafb" name="qemu-block-iscsi" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="30f2957a21a56c52a0e181c9f9ad11f4ecd471f842ba89d06b74cbe726bb8e54" name="qemu-block-iscsi" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="709ffafb4e9f6743a52f974774b39ffd3f1c70eede7895d6401d24e28a45d014" name="qemu-block-iscsi" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ab23e7f37434e6754f5e6d08a397f10e94154e275d1b5ef716bb5d700b4992d0" name="qemu-block-iscsi" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c10e61803c8426318461d25a22706ed0eacce708ff5cef74800827979bb5ad95" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="93c2a48e06a6a365271598e7d6d8bf94d7775c69b53128569cd2c6f9c6c8504f" name="qemu-block-iscsi" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="57179ac32a23ae68a8d02a4526b5f87709af508579d664af52f76289170b12ac" name="qemu-block-iscsi" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="5aa0f88ad5f0fff70c223640ce148ce49a8dfa52527807d649fb69726339e360" name="qemu-block-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="90af1cc38ddee396ee5c57cd74fb561687d39622811c65f852efae809473a363" name="qemu-block-iscsi" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="348b517021c06f6fceb90fa5c5f2f74f6d21bbac564cae35bb56ec03047ebde3" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="5b19cf2e28a24ad8016e6120d1b9e43ea1e5ef427bb6fbdb7a4057541d24e5d0" name="qemu-block-iscsi" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="61ff313253a32712199cc7ea1dbdf2d50ed0df63eb01f18e71ddb0bc2f17da76" name="qemu-block-iscsi" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="e3ed9be8e5ddface1b698d799bca5c7c2df0436be06e995fbcc4f71f9ec3ef7f" name="qemu-block-iscsi" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="61a734fd6ef9ebef9532331f0493b0aefa45d7bd219ff57a1cb078a8f0ff49ca" name="qemu-block-iscsi" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="1992c03a643fcbbe13be477b48c8794b017707387e3a211b7624569f9858fafb" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="c496d57429bb9ba5d692059c7712aa1d71d8f247703d7f4fe7edfad3d57ea3fa" name="qemu-block-iscsi" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0e41a2d671e246fbab5ce41a5d2ec67aadcc9b082f59a3a7a7449f456041e714" name="qemu-block-iscsi" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2abaef211f8bbdd24452fa490153c0f5e7f901e74422468d403b96a8e53f763b" name="qemu-block-iscsi" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e5ebb72b70fee4eee44fd15bfed178cab3c776c81c9263dbe6282a9da0fb0ccb" name="qemu-block-iscsi" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="92a63a656e08251c255c530106d3694a5bf9d3fa4811d1430a02270975c2587d" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8de6b61caa92116916f69ed27c85e4bfad81048ddc7d5b535f40f0553a295656" name="qemu-block-nfs" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="663f136a48d5a03b64e7901be2f5e8f0294874c0d721b725473f513e1cc93f5d" name="qemu-block-nfs" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7908c9cc4ae1e3979e0a8aa27deabed71fc455fdeb151d62d616230fce3172f2" name="qemu-block-nfs" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="29066af6e5fae82996e53461ea6344fee14e0b219a803768028119af1aaae060" name="qemu-block-nfs" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="b1d40b34f7a79f5b33abd3fdf0a3f2e9b9f3ee51feb4485c38b50314a7f90a54" name="qemu-block-nfs" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e9cc9e994da0042f483da17d44031fcea7bf85f6e03d286e9e8edd6de36d6a3e" name="qemu-block-rbd" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="92fdf05d2031c6cc13a9d264a1608c80d670d4a8077dd4219d7f0dda3911b5f4" name="qemu-block-rbd" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e34979704af998254796b613619ecf66ea9a910b83464ce8d4f2c29ac35018df" name="qemu-block-rbd" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="14cb785263340e5620f115261a1079663c589f01e0bfb58095efd1cc04b8318f" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f983f3d24248d70bd182d5e8a0f9a3d80e90463fe1df1afe71eb88daa752179f" name="qemu-block-rbd" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f0941df05809e466bd9102d3abc7131b9f90a7e8a4ae06dfee91a87d43cd13de" name="qemu-block-rbd" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="6e4a0fb60ba6cc7d468e6aa88050eac10204e2eb5edf362e52cbac19d4867d63" name="qemu-block-rbd" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f680ce3737ea1ffc0b32dc7efc28841e9e97a9f51894c2b74228fbd74573a910" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="81c3a5c70a63b2c723ade4e42fae4e0533626e214838d85154ae770a1f1c20e1" name="qemu-block-rbd" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="797a79e4e7f78706134ff595d3bb09444328e4676299d172f14c060457e166b4" name="qemu-block-rbd" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="20854fc60aa9f43028a858e75b33276a851e22e236651f02a03d9a77d8b60242" name="qemu-block-rbd" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="9aeeca401a270bab37e294f736d35976b8e40a6975012da15e1179aa10780291" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="3b0a99f909122a4ffbea438bc0261b8b9c82bf6a3f4106166b9f54070e93ea79" name="qemu-block-rbd" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="a10a26aa72bbdd309766782e76acf7e43c9635bcd5e7134864f0ae84b5b53107" name="qemu-block-rbd" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7aebcc27024dd95e5ae8b6de628f8963313a55662515f3108a82d9745a7c4c5a" name="qemu-block-rbd" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="372b7e850513537357d7b3deadbfdfc7bb0fbb0cb31721d353a3fe3724ba46ca" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c65751bc98d4617bdde5c3e91b1b30733a22fb6c6ef2fee1cf8f378bf006e5de" name="qemu-block-ssh" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e73e5c96a7a3f530f15e30bf3c9fd56da2fef1def0876be97e8fbc4c21c98b0b" name="qemu-block-ssh" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="927f549343d9101f1102bc4a6a1d781501035078c7df3ec8282bcd95900944f9" name="qemu-block-ssh" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e113ce4bc319c4f3bc7b577e05958016cfa4c171bce3e43c5d7f1d93d49fb65b" name="qemu-block-ssh" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="cd0498e83164526f23804f52bc505d1d28645bba7eb500ed2ce407cd1ee7aa40" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2fc1a5638e9a100a5423995e33085eadbeedc9b4607bbf52f34a8173b410a655" name="qemu-block-ssh" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="de30e7562b4e41a5e33e9005b86e9c778bcd3bdd802166b7a64b873dca5b756d" name="qemu-block-ssh" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="3d284c16b8d2ccec6c189d36df2514beb12e37f0834bcd497ca439c17e8268df" name="qemu-block-ssh" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9314c364f76fb7076649e0bc823ee1d28fd060390dfb3314e5abe2d78514219d" name="qemu-block-ssh" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e36617ec5d87efb9d9fa515e6c63f7b58691a2ebdac7c83116ee6aab658e93fc" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c127f2a5fb817ed0aca546ba93a5e64727c2f021491c3bff7aa9142237badc5a" name="qemu-block-ssh" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="1a5badbaf488e6d6511f24496827e84f8fbab56bc09dfa18b70023c3178f836e" name="qemu-block-ssh" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="86a8acbab08602c16c7f81dce1d270ea986b0e000f9f0ce5b51d54b7703d4ee1" name="qemu-block-ssh" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="c82b46a84f79e9f6e80ed833eed4ebcc3f69c79fdde15817b802d7ebe645ceff" name="qemu-block-ssh" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4e10acd57ba721f5cb908d36977e40181ccf7455d8f52c8897a283599e2ca347" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2a7ff5588f4ed31f38ce298ac5e397545d21982b7a1904c75e961b660cfd8aed" name="qemu-block-ssh" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="67ea7193b37d034b723b9115afa0a1e74177b916977574f1a24ae48b4c4a0e98" name="qemu-block-ssh" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="89fca50df5d49929acd243ae818a9ddacaf213548d58e08d01b0d4e5ebed5b4b" name="qemu-block-ssh" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="5705407b15fbe6709705daced8c249a40d445fe8be2baae78b5af4eb09ec52be" name="qemu-block-ssh" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="a904474d3bdbc3fc7a9864cc76f65ae125aa6741c8030bd96483be0037e79c1b" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="22850790dbc614999932310604ad0db6a8c057f38498f59ff492a6eced4aeea5" name="qemu-chardev-baum" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="de6743638e8da5ab70f22bdf088a4f9cae51d5c172d0fef8ff2469b6a9972271" name="qemu-chardev-baum" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="17935fe6d1fef7b6b932d5da013405b83a149c1e00ee07ba935cd7e23f963c71" name="qemu-chardev-baum" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f9bb9eb42b9712be76a9c2f44157234d8c7b7af98ebc76c91c88e96b9ac64853" name="qemu-chardev-baum" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0d4b550310fbf1af4c5793630e57b68a0b7cc6f33a86eb3e82607ead622cf0cc" name="qemu-chardev-baum" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2b82d22d4579b78399fac0464ef876247835b7d0f43b3b574a04f95a1d162f05" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3cfa06096f643997c4d0d31883874ce5b9120b5ac8dfe737cc07dfbc7484ffdc" name="qemu-chardev-spice" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2fcf0f992a9cfba50a11765b16c086231658febcaa24fc6876b3883706d1f23c" name="qemu-chardev-spice" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="02ca98801877f5c5f3118bdb609f880502c14b41c0d0426f18ec6806ca48967b" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="79ba679b743a19f34935ebb120b283677e9b6764e43f36df88e444a6825ab2cc" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="930a9267d2e5980d8b6abfc15360290d819893c870f0945d3155517b783bf0ff" name="qemu-extra" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="19d7e8d01c4f82ac77edba255f3782a828fe7f3ebb89b7e8a8acebafbd4f0c73" name="qemu-extra" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d1f2a3b1a70c8832a532eeb3c2dd415fc2a04cee5fa610e774af47a8e54025ce" name="qemu-extra" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="933b1bac4f444fa0298e2db8ccda39f2e83354ceb4053a6551b8eae056291651" name="qemu-extra" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="cb6c82ff573ae5c267bf63c2bffaaa050803613d3e41692c43fb84b60146bb64" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="892d3a04f8bb1450cd8d6453dfbeb03de1e34934d1eb261027d4c09780c07879" name="qemu-extra" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ff45120566d003cf520bf193b7d521258507f69cdd6466800745853ed660d367" name="qemu-extra" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="6323568a94f4a4fddba37d61216ee3e4cc8d9778454f6e1a2c006d60d2b680d9" name="qemu-extra" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8b1f19e8fbd0ae008b976721d6a38409ffe0a65d7bed20470f93a81c5fbe20e5" name="qemu-extra" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="80b54640cc9141c0ba4c8f7604d9bef0b8d30db6b20ddb9e70f299aa2b74c9bd" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="b9efa71ec66a5f4c0661084a125e5913a68a5ef9d399a4dc2e1fb3162b321eaa" name="qemu-extra" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2d8fc73bc6334c042013b203fd332eae11d35e3880bff640863cc853d75614cf" name="qemu-extra" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="1f47c90b18c9d3934202e69bb85f9e665c119cbac16d79a6c21317fcb19ba33c" name="qemu-extra" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="a6f6e02406a4080898c0e49eb89b9c644fa47a39d6033db58f677b5c1a3c5823" name="qemu-extra" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d622c56e57f8f7d998f24d60f121b1bc53ae04222cdf4b7fc82c00d99c9269c6" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="151b0bcbf47e29f2f0a64401957551db90230de67f588fc1d4a38e683b3a86e9" name="qemu-extra" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8450c43f3794e7b5bf91a6fa254d320f038f96329b4552999dcc85fd24491e08" name="qemu-extra" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2ba5a65bdfb469173d44f1fdc11ceff79a0ece22a91c63088b68ec803fa2da10" name="qemu-extra" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="1d87a3a90d8f0ea972d710420b07858c5743fb8d5b739d0b6dab61d0a6391281" name="qemu-extra" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="851a3d30a92e9f811eac20b3fb6b644d19f167214bf279e9410b4512b93712e4" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="bc2fb693910039298aaec11d7390efd234c1123eb52e75cb3e11b5671eb5c712" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="292652a65cd35a680b50db1fc42afe1fee2995899b55681768f8f41a3650d7ac" name="qemu-guest-agent" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9867f3ad395779dc82706f443979dc9438803b061da12129ca5806b18c883c6a" name="qemu-guest-agent" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="6548d80e326d73a60c56b6ecd11a2ab31b031dfc35334f0a4d7b6e2906e6623f" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e52106fd463828808c4e09fcf4e109b33351e3989649dc41d09cd1b5e39f2e50" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="84dc4d2be403a3f0adb0c027c992528ffc1e69c68eba14e34fb9f538cef1aaac" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e16ceef1d63eb32c95607cca845ea8e60f9586280c910791510546ae1bd2fa45" name="qemu-guest-agent" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d8dd267012c9294bba6b524d779880f16722b5e8ea99b7d2be8d11b4f59d09d7" name="qemu-guest-agent" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f553a1cabe710eb8dccecb85501aa3099c6fa50f24c1f7732f177a1d6827acee" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="5d94aacf628add45da21bc81cd5a5f7d6d0612648c0e76bcb8f806162a9513d1" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4506f1895f6487b2fa0c0fdc0f20c9a1da7cf9e0a9ef560c69841a241ba4b4d5" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d7609ec1b9f6373f23186337e2fc90a36c7be9537852a93dcf2f51129f1d0fb3" name="qemu-guest-agent" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="e20ec5c033c51d7ec149cea0f53a4abc91751e2ba52154e3a9bfbeac3d72db08" name="qemu-guest-agent" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="a017a8f07bf532b079741c4bad93f2a59c8231ec52c00a426e72e99642acf5d9" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="5d35394106592359131f1d26c4b470805032a328961466c0c3e23ff09afcb263" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2e61e9ce1e4d521c6b8232d189fc0991fcf610874f7e7cbe158d14bf9a0a4d1a" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="60d23052064dbb0e46d0a9f0dc673825c645aa80bf792586027b9eaccf92d0ad" name="qemu-guest-agent" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="628382eb9d5ee011c854249750f8ef9965a1b377aaa6fce6e34716c25240a7a5" name="qemu-guest-agent" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="92f01ee4df8b98aed84795a3335955c9438a49a806ab6c5381bd4b4726e8b5e3" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="285395b65e9670d02d9761b957bf6ec6d7408dce27eb654d01c8c45b602d4b75" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e3d464f273ec292f0abe2b0631b984fd28cf295a38cbbf8979f26820872578d8" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="bea52ce506fabc83f695a3d98220b4dd9e23bf04590afee32cb269228ade3ad7" name="qemu-hw-display-qxl" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="02eac98467646a1500336b9e6417490fda7ed3a9014b1e503bcfbf187b097b4d" name="qemu-hw-display-qxl" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="5d227457761a3d64dec7f9f073c04e8f97234cdf89f6a362cd152ce15afc3821" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d39e2b09eb2f810462e227035b1ae6d15a1356ac08aa5813474e831d6244c055" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c67d3c215600f67edb3c2e2e9ef229bb7f25b1e5bb2e713ecd37b21fd3ae50ab" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="bd72e696580b5be73ba7783db1392831128ea724350575b40752286c16e38929" name="qemu-hw-display-virtio-gpu" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e9a414e6e09a9ba16c00b5d92cbb61c9a211c674ea32ae2a63380292541ad055" name="qemu-hw-display-virtio-gpu" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f864491e1a3e79bf78f42cdfcade334f7aead4e2c1003dbd3a1ec52ecd72619c" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="02927fdfe9e0959957503398db601fd3705b138dbfbe9dd92420180768723dab" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="b6d727719d8517602bec99b858d4e7a1cc02f0fbe71beb3febd2a9583ccd7674" name="qemu-hw-display-virtio-gpu-pci" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7923c0cf6bde1e1c192c6babab7ba96921669df47d4a39f462d62efca57f65c3" name="qemu-hw-display-virtio-gpu-pci" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3cd0ca6b7c1d6389e03cb25c71a538d8668912581dda6021e9dbfa517bcada71" name="qemu-hw-display-virtio-gpu-pci" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8452e2e09be76553000f885048ae3c067f9ce1a4a43fc1c89314d1477f2f66c6" name="qemu-hw-display-virtio-gpu-pci" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c4b4c2309d39d8bc9ab56d4fa55b6518b1c9b861c7557988343ea28224d7bd00" name="qemu-hw-display-virtio-gpu-pci" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="457831d7a10edd40db68c307912e9111e0b89b99e33c8da81d2f56e5470dd3d5" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="008acf16e4ca469e93b9b435b79108cbc23f2b4b8fbead8289f78835d8e48805" name="qemu-hw-display-virtio-vga" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="47cae0ff99abe6abfddc009679150bfbbea22f6272c7fc8a4baa3ecda2451e0a" name="qemu-hw-display-virtio-vga" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8d341ea52d6b713937d44fd6f9a324af7fb76bf8c1591ccd99edeb7df5ec0bda" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="57f787ca4ff225c2482243e6b205b505ccc051c186983fb158246c0cfc338cb8" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="af40d6b2d2c5848458360fee761706daa738aa88a4f6c3b647d22f22dbc1d5d2" name="qemu-hw-s390x-virtio-gpu-ccw" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="35f66e51cd8b4b04e1d88d415f280d500bd563521bf3a6121b7bcb3090a1c6e9" name="qemu-hw-s390x-virtio-gpu-ccw" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0b9174482ad238cf7b1f0dbc3c661e5320f5ae23be5052cc2e12d92f020632d0" name="qemu-hw-s390x-virtio-gpu-ccw" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e2813dbddc299dff65c1efc8aa7bedc2bc88ae49430271e48bec069f21774148" name="qemu-hw-s390x-virtio-gpu-ccw" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9ec5a20b8adb221618c64cdfeca3509d5ea1f573e16a8406a006110bbc558bff" name="qemu-hw-s390x-virtio-gpu-ccw" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0dad6d1baa32cdb5379be5866d781d24de4e09ccf6984fbc51da9b163de15cef" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="cf96701ce544700ec7cca20692237ea9d0ef837b53838a3d0369b7028f81af9e" name="qemu-hw-usb-redirect" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8228d9a0892a13b163748d13f46a51672f9ba36d95bc9b3948e05d5202862bc9" name="qemu-hw-usb-redirect" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="a135b37c7d05050cdb61cbce09c2944babbecf93eab6282c037eb18cb635a06f" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="227cd7aa3f5ec26dfb73c7369051cf6a05b4ebcb66e590e19264af383e232573" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="6d0cba3caf390291f58d487048604d9e1daf8fdf2221984ee3758b8d2dc863ed" name="qemu-hw-usb-smartcard" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9677e4387a269f350a427af49295de578e483f385913b12a3a235978312f1f6c" name="qemu-hw-usb-smartcard" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="493792e8ed5a621f9294aeebc153ae047cd13c43111dc73729e993329fe9e2ea" name="qemu-hw-usb-smartcard" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="19b2edfc16ec4aebfd219d12241a65c8b7e18b0b08a1c199a6779429da2e8387" name="qemu-hw-usb-smartcard" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="064459c6326ca4b6722d11c0630b8b7774e4845408198c361df13474d42ee5fa" name="qemu-hw-usb-smartcard" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7f6634a1dac69bebf53b9d8586e348016bd9cbdb85e637c56eb4ec0701524f56" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="6264da0eeab509883e2cf0c706ca7df5e3cda2b53d1c1957e6591a315c821c3d" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="417212d69a35bf2bce3d54690f83ac0326814b55078b94b697ae6a16c0a6cbe3" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="16021149d2b578e30b10e0a4ce63e795bbfe4348cbfb502bd179e7423da5c571" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fd3abba8e10aabe035a36df80dea713b88da5425b521720bd1f37977ce256739" name="qemu-ivshmem-tools" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3caf51b9eb992937b6c1aa1820890f87558dc26083639821ff2f717b01f62788" name="qemu-ivshmem-tools" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="241367ffd7417960d97c472cc80f5424750a3c70fd513c42a75aed0be9ce23d0" name="qemu-ivshmem-tools" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="be49c4a1a0e5402f85ec70d9029a121e5711be26c65a09f58bf4bce0abcd2359" name="qemu-ivshmem-tools" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="79b55924b33b6c78f5f78de9bf051909da2e77a27126e839dcc2c8b763d41637" name="qemu-ivshmem-tools" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="95d30102f8741dc7e9004ed0d281a72ae5cc37759b4186e63e0db987295ede9a" name="qemu-ksm" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="85c07ba41209ecf502c93538f9b8d081d8baf8aff31907a6faf565c2745f47c1" name="qemu-ksm" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="1bcce6b284228e7224c3168c7acc92b5885447a5989876f13dac598f9c445d4d" name="qemu-ksm" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="eba5d0731c3f0ec79aa5673175efcd6ce6d30711eabf69a2ba5432ffa439eea2" name="qemu-ksm" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="85118f560a4d9e6229dff4dd68f6f3ba88065a98c7064c57e988f9b0bbe2092f" name="qemu-ksm" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e679baa5bf9dd3246c9871a431c603d9b09311b306f5ead039739bcc8e009f81" name="qemu-kvm" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="87eeb3b0c9b452b0b8c30f0485080c0cd5977272f910308c56387060359cdc3a" name="qemu-kvm" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ca30cf0f1432fedd1d8e99addd991e4f0ff99b7ee6ce6a73905104ef5d6844ed" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d29a8f918c90af47d8cd3f4ce43ab6848d9174036021f8155f288a5eb296cbde" name="qemu-kvm" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0a0571d4353febb47faafd94649ab4ea7368d4d879bd7cec958f58bef055992d" name="qemu-kvm" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4911fe3bc50eb6ecaffcd6f24c6054c5864da7b7d8c307152fdee82907558ed4" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2728a625df9d873de17a775dcbf4674ee88b928fd3de52aec94c3ee0c66abb29" name="qemu-kvm" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d3a2b118c961590d42c6e668a99c66112ea908c557060612d4c8d81546d61d78" name="qemu-kvm" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2d55c006bc3ab0b42551dae2562d0e279a353d3b95a26766bdef48a05d5ab225" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="9f249e43e719929228bb410ccbe54871d2de38bb89dd843496e65e1462ee6ae3" name="qemu-kvm" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="31688f238183e050bf2da1d3d4bbf4e9d7f104acca59f0ebabb1b84b905ab04d" name="qemu-kvm" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ff14b73664c878fe865a280362de9cb3b02f2800012dfa6044c112d29665c562" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="800e30e1867b15277dc2dd61e305611d3c716b4880528dc35f53fc4f17b6e0b1" name="qemu-lang" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="284afdd501c94df909da5cd6a748f2da80af31ee9e2e9043ec14db2094738b49" name="qemu-lang" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e6a45b02db9eba72032b61710e0953ac5120e2c63a29d9ad0a703c08342cde7e" name="qemu-lang" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="88dc7382f550e68c9b5ea67b50decc3596fd574c73ddde484687b24d87a6676e" name="qemu-lang" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="37b3a5e5115ea3e0321f1265177d5d380bd242e9004efcfcb7229f422b61d90e" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="551a52b3741ac2bb467339d3a75269ed53fbbbc220d40ce2af63f753222250c8" name="qemu-lang" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="64e80e2513565051afb2fcc59dfaa3e3a4270b9056e0222f02c25c83a81b4ea8" name="qemu-lang" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2f9dc4ff928e2b465489af6c921a5d78922abc5b536292c3292c6f8fb5c4957c" name="qemu-lang" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fde61ed7f7e5cf34e88586b2bfad60d533e3fc80d8ed143fb6064f953908ad4c" name="qemu-lang" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="6e97d6cd7d8c45b4db8de9809cac6676b59cf0f51cc863bde70eb6cfb8b52899" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="bd64d8f7c9a08f1c5fb8b7e5f55e1760d4d1f8a985fb24fa84f766c944e1db92" name="qemu-lang" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="81a28421c751a4f859ea1e3434b2b11971a64e8920e7d9681c18232aa3e9da46" name="qemu-lang" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="21d9344d5500e13697d268719154f14460ba709cf4a4a147303ceeeccfbf6b53" name="qemu-lang" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="7aa541fabe3df56c0df4bade10e232554f70567dcce9d737437dd0eade87fb2c" name="qemu-lang" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="3c9275580eb54a7f2c2adcdec8cbcb8b8e68d63400fa788c68545c2a0bb64148" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="3f1875dbf151b17106eee3914919f9ce49bce68c494c61b96bd4f70bf2ba6af2" name="qemu-lang" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="95e93514b5898edf4a78a61ac9e1764e52fc801df1030e180aa1a84643bd4464" name="qemu-lang" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ee469de6f5850bb5e5c77f8d932fe8f91ce11a434f39a30313073245aba88d89" name="qemu-lang" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d259761625783d5f463caa9ade7e83239aae7641b974e6bc1a44048b4734c5a7" name="qemu-lang" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8f74a1140298c7acb881a608546874bdd425027a4e456101ccc11bf81a8a8fba" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="56cb84c8e0a9880bf59b63ef4fa45c2f32b5172c25bffb3aafc9028167f6eecb" name="qemu-linux-user" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="ec127951116d6e7dddaf7a717baf673c4a82a25360991d28e5eebfb38101df11" name="qemu-linux-user" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="9bfb2f711a6781af7269be35bfe0487a23b39508d24d3b0f00ec9f0a55c13b24" name="qemu-linux-user" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="3cae53b27b8d9605b851a220a65c16b25e2fed565f4f1246d544d8bbe48b3fd6" name="qemu-linux-user" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="a38d17434d9160f76bd17f5124960a3e9f3e4e3819140b145d9d1fc4a2bd0819" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="3e0834ef01862a202475e39a03796241dc86ad0f0b9abeb1efc5f90c2e2f0f09" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="lyan@suse.com" date="1559044800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0122-s390x-cpumodel-ignore-csske-for-exp.patch</changelog>
  <changelog author="brogers@suse.com" date="1559908800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  0134-target-i386-add-MDS-NO-feature.patch</changelog>
  <changelog author="ohering@suse.de" date="1560945600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0135-xen_disk-Disable-file-locking-for-t.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0136-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch</changelog>
  <changelog author="lyan@suse.com" date="1564056001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch</changelog>
  <changelog author="lyan@suse.com" date="1564833600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch</changelog>
  <changelog author="brogers@suse.com" date="1572955200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0141-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch</changelog>
  <changelog author="brogers@suse.com" date="1589371200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0157-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="4f2c92ed0e315be799e696d3dda648c2db22a7e5d502e7a41ad23a301ce42faa" name="qemu-linux-user" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="8e177e364fc39440f9c1d7005615561d07a3f946a802cdafe75d6c1926ee081a" name="qemu-linux-user" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="021b3adbf1e7cef3d1377550afacf370f05264fbac499f467342ac7e9d163c5c" name="qemu-linux-user" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="16736116cf84793aa942d380798e6dcb71d911503fb9e771b4ab778789a35ec0" name="qemu-linux-user" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="fe668901d663c0f8a97ab2efa22efe1082c34273d272e1876fb7f5090509c831" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="0bdc5bab6697f13e0ccea422a4a5cedefe943d2688dc0aede708d4a3be0e58ef" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.1"/>
  <changelog author="brogers@suse.com" date="1584360000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0111-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  0114-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch</changelog>
  <changelog author="brogers@suse.com" date="1584360001">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0116-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch</changelog>
  <changelog author="brogers@suse.com" date="1584446400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0119-tests-qemu-iotests-common.filter-ad.patch</changelog>
  <changelog author="brogers@suse.com" date="1585137600">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch</changelog>
  <changelog author="lyan@suse.com" date="1585915200">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0123-pc-bios-s390x-Save-iplb-location-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1588334400">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch</changelog>
  <changelog author="brogers@suse.com" date="1589544000">Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0126-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15-SP1
  * Patches added:
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- The qemu package work flow has changed, resulting in renaming a
  number of patches, and inclusion of some additional patches, which
  are conditionalized out. The previous automated patch workflow for
  the qemu-linux-user package is done away and now patches here will
  be manually added
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Patch added for qemu security
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
</package>
<package pkgid="df12597b3923ab44df0bed476b2c0e2db82a226e1d37aa1c8b4f84a32e95a3e8" name="qemu-linux-user" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2ef6acfd994d7d890b37045b37e4cdbf4619dc919cc4c31161ff56fc11d2028f" name="qemu-linux-user" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="27feb570c9200c29026c1d37394b25a0d20971777e16dcb8ad7a118c509669a5" name="qemu-linux-user" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="0c3ccb68df88ecc7ab8dead73b8c95867364a168fc079032b161c853305f623c" name="qemu-linux-user" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="af9623cc75cd726c792f3f132cbfa3951156e6d99835dbd6b38df9ffea449fdf" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="c333eaf88d54a36be5603f3d994340c9717af5f7206e6ccb18f552a417792671" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.1"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="b59f6637d3e37950fee82da444f9f21b1b251c6e342075bcffba87c7ca2a54bf" name="qemu-linux-user" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="76200df6e57796b61e568cef33eeb76f886ca3c8398bdc0f076ee643103430b5" name="qemu-linux-user" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ff1820329740be5746823a881d003e12e1f74ee8a9eaf5510743129cb4c2b559" name="qemu-linux-user" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ded97aecd3ed52ad07a074b147b42ab2ef6ef5e92f5cb1fdf825b7405c473643" name="qemu-linux-user" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="645aab077cb6be046008a4264e7848ce5ec4006491ebae1795c083cfcd174359" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="820ce18c87567d70dea07936457a54dece0f8ff3f37683c494b3d96f17c7a31e" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="5b6af55626abe05342b5a031a9c9389cefdb1fe06ffa249f4867d5daca918950" name="qemu-microvm" arch="noarch">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="3adbcd34e1ad41ff57c1b09f6c575d265e191d450a2f4958a719b14e3667649a" name="qemu-microvm" arch="noarch">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e5cbec0887c3a34b600201a203bb79b9c5be944e5ed8b2be86fef7c75f4755cd" name="qemu-ovmf-ia32" arch="noarch">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="d90fb56bd5dedc8c22ff9fc910b1ff5db178db1133aebfa8f8603670afd6117f" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="d504c46a49f0f26e05787a8594a0df534a4f1ea6a0709abda98cdd57bcc6a329" name="qemu-ovmf-x86_64-debug" arch="x86_64">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="0cc36c107327bfa7eeb24aedb5a2fd06d0b6175f68b8b33673c251b387b04138" name="qemu-ppc" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="015a54344e3744ef9c228e46b0cd2008795a05ec310e30ec058b96e31942c419" name="qemu-ppc" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d3feb39fd6f16b29c3be3c4b7b8dcdea5251fb08ddfc1c7f399db3b4e91d148c" name="qemu-ppc" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="b507d8286be635d78564553b31ba18fe0a966080f937bc163909fe1eda95fea8" name="qemu-ppc" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8c9e146ae8085625edc5bf6c5819bd20192d966c22cdb5798144d67052c453e2" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="febf3f763bbc071cec387757cc9aeae2e382e7c736e0c447147b1968e369348f" name="qemu-ppc" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="141999f60b3b80720c38ea60ab81dd669a012de2d2ab1287a6d7c63f1d74b90e" name="qemu-ppc" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d1bb647167a8c665e92dc46595892368d975ca48ce32f7bde350d76c24e3c02c" name="qemu-ppc" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="1e8cb859c05689dbfe313264afb9bb450a7cc8f2b01b88086f9b8cc7889002e2" name="qemu-ppc" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="b34c9bf5d652dbb7c4a92cbf93c62b53e6e392b22d53b3f326f0877640bf1ba0" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4fc14179c0254e92dba3a04c93719fad7c0472e43d298cb1f2d995edd9e30d97" name="qemu-ppc" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d9b781cd820e539b9a2682960c8cc3c93e0d18b91e7dc368f90bd9030243ba5a" name="qemu-ppc" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="02cb1217bea34e4c23ed70dae8c00b09abba02923734768502051469bfb1fa07" name="qemu-ppc" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="5ee264df682d1f0e7c88039ade6b6f6c060d4d80556d03c1921302623dc3f5ee" name="qemu-ppc" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2d10eb5fb14adee56a5f48cfddb9694faddcad46c4a0ec681c3bf219799c4faf" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="1a4dfff5d04fae6a98c8dfd5fd514e0456b70655053e96c03cb1141bb2260e45" name="qemu-ppc" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9a210f82669c9d74e2be7f361dcf6fec800970ef5255facf97cf89df4c9938c5" name="qemu-ppc" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c0520e2596bab6b715698201b0860ba277c30785bf1f5d8672e1ea52cadfb43d" name="qemu-ppc" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="a256064910984cc407b3bc89a2d2e208bbb633f1d11bb5d7ed29ca46d2f6bb59" name="qemu-ppc" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="070c74fa8d5433a71dfc056ad4a0d3b49e0d266383ee5e56297afc4e29c86681" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9a2df525c456929e0e4de3e081885117197dcfac8ff1fb441f01201558973d7f" name="qemu-s390" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="417076f093bf247a084f6929b91be5e7c3929c0141b6f6451a89c9c7a4cc4041" name="qemu-s390" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="df34d531dda2e59013abe72bcf7489005745f7ff41856ed1dbc3e38c8636278b" name="qemu-s390" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8ef76835d1c740e19ae33a1d5ffd2867ad4935f26cf95a18133a42b05749250c" name="qemu-s390" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8eed67fd22c9dac3f78fea57c4caf7f171e813031d7d66f618674c234f5e9934" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="52827529c7d9db52b149a756ef32da030793e4d8bf11eba715da927b743b5508" name="qemu-s390" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="33d3c1cb0c65d3801b69ca0288ea02beeb355d1e87ed3d272339fddd413d568f" name="qemu-s390" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="1fca7f1ad6bebe18ef160214c6ab39097441115b33e86811359b633383b5b534" name="qemu-s390" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8040c39ea30f351c8f38667abb72fd084d4b7c5fd9b98cf47d04299a1a3c91c2" name="qemu-s390" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f72418943879f9e82731652da536785245ac1eb6cfe3f1833a83b1a1d35d1c75" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a8316f013731cdad2e9d242fcff645a125ffecb00c3458c1954177583084dd80" name="qemu-s390" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="0eec7f71a4c078ba0c59ca3b156affcffa0a23762dbbdf25c7a2c7bcf93b246a" name="qemu-s390" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="517938e85ab4d25100a7f002d768933af28e28bffb7649174902d0e37c547030" name="qemu-s390" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="8c2119c6b8441d2494ad2ff183674b7e84d2cfe44510f2900022c9d42e6d8835" name="qemu-s390" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="48c84a0e6eb14c3193288898348003edb5fd4b77126f5a76b4f1e5db9eb0d854" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="5f31c435871dd47059567828eb638418b959df012446005ce91daf74f7b56fd6" name="qemu-s390x" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9249e47636ae1445c08e87a866c117bc73d39e551950bdfb0133059a93bd4e36" name="qemu-s390x" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="0312811fac062c645ec3eac8e91a6c23a555eebbb7660e459902eebd9b1a5a15" name="qemu-s390x" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="418ed4446dad6d7d3c03c07436a0611dabddf3f880680290f392199b66d802eb" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="162668c4665e9e469ee2d92a652d9172da52ecd0788ba92b93eb93e5e95ed0fa" name="qemu-s390x" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="05023c261620a5a650d5c173b712530cb770e36f8b91d705563a42c521972853" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.11.0_0_g63451fc" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="eeab01660bd118dce06a151770ef10ad0d653987501818b95ca2e419e3b80319" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.12.0_0_ga698c89" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c69c96b1c85fb1a260242c94d82a3d509fc6a6d396bc472f0b71590cb6550440" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.12.1+" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="3e1f3ce16b180c8e08e7b5775ab7aef2e1abfdd9cfc936c3a8e97c2607b46955" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.14.0_0_g155821a" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="36679d7654d0b5d361a911ffa523d153db2cc45961acb10be1a1e12ca17abca8" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="fa40a00cdc6e47169bd816d6a6e404ba3a005052b4badc646e1e323d47e5ddc7" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="6a29c02c03ed26411fab7d30c23beb1fa667c19912352d84767a4243fee6e69c" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="4060f376fcdd057c4bfd29c1ac79d8cf62246cc72960582fc685f158a19c6cc4" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ca153f8468d0459fb47a9264d86a98c2efed0804d48b5cabb1c0cf0713c4a403" name="qemu-skiboot" arch="noarch">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="9bc1f3abf2822027c009bba46c1e8fc4f37f11d5eef67233ca334fb6e9a192fa" name="qemu-testsuite" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="817a8ac45b4e928aa0abaf2f2a3c219f30cb96d33a992a988286c835b48c108d" name="qemu-testsuite" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d3862e3542d00b6e70a2166d533f4b406fb20e042a893677de0703552dcc11f9" name="qemu-testsuite" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e534690cfc60b579e063c7c974d1c3c75c37f02245425e3822f3f13746c8120b" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="7d9e89ef5c2d222b12fbfaf8acc3becce639912ae86dbe24ffc3d401a55094b5" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="693310b5a0a9ddc069b3d37c9c018ab00c39417cc14bbb681e32602443cd4996" name="qemu-testsuite" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fc7b5d81c571b72caff61e8aed11c17f54d2e33ebd4c76762f416c6dd8af3986" name="qemu-testsuite" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="f1ddc1e67178105c391076fe6a05fd2858936cd174c5969340319e1bd3db8c1d" name="qemu-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fd291ca886f45f14e0167b752e62eef5a91986fad969f84005e771346211cbf5" name="qemu-testsuite" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="945f62876ff631b96cd1bc438905e9a38fe8062c83be4a31440fe3d5d6e9b110" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="aee8eb88a14011c758376a457db504b78c6b00346ac3565e7f8d9b8e249c998a" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="0264e27d6bc89c0e90fb4e85ee6826862d10ddd62ebfe6dc938f9a86f4ae283f" name="qemu-testsuite" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="7fb72d5cf997685a2b15448d875f3e9cb5df0af54f75b3f16fe6305ffbdc5b66" name="qemu-testsuite" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="54ee04edbbb089bb2645ba41951550ad4d627454ad7e4e1ca15384745f3b7a9c" name="qemu-testsuite" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4af3527b170c13a93a5ca411903eae0763c1c0b81494b382a0ac0fad75602cee" name="qemu-testsuite" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4afe5dfaa55f5ce19ce3b8aacce672cbbe82adb45d0ecb9345ae8f2b8d1d0a27" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="905be7b85cf6ea6c6f3baa5d56bde091d870185f91416e192861d9769c120c12" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.3"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="a3ed2331ac4d90f0be384876ef33f998ca2a5179b51bfaf922edd77126467da5" name="qemu-testsuite" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="830c89b6befeac70acced288bd8102fe31cd6616bbe5ac840995a20824518bd8" name="qemu-testsuite" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8bd0a4b89583b6f9e1593d737446ebc122ad6dcf6dde8f83f3bad4f11894620d" name="qemu-testsuite" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f6469cbec86d1b9f1f8e7eb47ad16170c0601aa458c49ffe3bffa8b282255bd9" name="qemu-testsuite" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7bc8a173b5bf9ff272399931332a6ad6664f2b83b0e43f9020805ba34d019809" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="34c8a76f22806a2fdee813aab6e045c05a96ae316290bee36f996e30072dfb25" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.2"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="6ee9d1ae43988e23789a73eb1e4793c6ca64d4617a8c9bf473d2d1c11e66cda0" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="217d7bd7cc71544166b75db57fac7c85af4efb6af923731025799903be0af53a" name="qemu-tools" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="d1a0e68621f35fbefa1cb8c9316eb0ea21dd59e820b90500ba73c6191f019538" name="qemu-tools" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9e096e6dde881b62a6690ae610de30e47ccc796bd8aed89948b569ec45d6c2b6" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="5a0750fe0117246ea95fd1c82493a82fd9190749aca81578510f65a0ea27db7b" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e3510d37dde7caee86bc52271c0e99ec27e641cf191d7c65e8c231f3c64eba89" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="3cbd7abae838c888a4d51f2d76428b95b8bd15e44f96cf47d14c44ec4b7ba1a2" name="qemu-tools" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="c068322846dc3352d24cca502cc1d15b5b3cf102d87dc041dff33edfdc38b894" name="qemu-tools" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="dcddebf320efdd890683678e60e4714d59df854fb5a18634001fbacab314fdf2" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="343faee1673ff3abaa8deb76dcdd0258f0b3c992f6d40128d68a3ccf56ffee8c" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="1f9be8c31af6d84507c62165a16e15b9d944b62285063840425c7114d9688e7e" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="02c3afe4a836599db31d3f9c4ce812c48f7ab41e219cf3ee5bad592a0b52e6e8" name="qemu-tools" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4b91d29438dd8318fa3a095e07816575be0c49b29d0dd55d52e72e59c169bb17" name="qemu-tools" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d1c1bc17b275e609e158c9e1969bb6c0e9baf0f9f042824a4664613c5f4ce506" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d5b735a4adef9f463b0d40e2e99e97a74dc2e60e02a65f51d9998ac87d4378ad" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="027647b426ba1aa1ebd88b372614784545741c9585717c976fb5691028ebe093" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="4dd3f09eb663d16e0f60fbc229ef0319b9514ee1667d33cd9bc1e4864af0324a" name="qemu-tools" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="7ee81703010adcdc5fd7b73a50e8e49f43bc21c8bdbe2e480c43f1bc3a2651ba" name="qemu-tools" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="8be38ed49dd760eac22022f4e37016bd6df56d66b6fb3d65c5b5c2cbf7deeb6e" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="beb44efe6530fcda3383930153bdf4da51ba7df65e4e485d20655ad68eeb1d32" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="492121af83dabe89a2f0dbe60c0742c6a99031aaadb48fea847d42b17e953311" name="qemu-uefi-aarch64" arch="noarch">
  <version epoch="0" ver="201911" rel="7.18.1"/>
  <changelog author="glin@suse.com" date="1580731200">- Build the unified firmware with preloaded keys for backward
  compatibility (bsc#1159793)</changelog>
  <changelog author="glin@suse.com" date="1582027200">- Add ovmf-bsc1163959-PiDxeS3BootScriptLib-fix-numeric-truncation.patch
  to fix the numeric truncation to avoid the potential memory
  corruption (bsc#1163959, CVE-2019-14563)</changelog>
  <changelog author="glin@suse.com" date="1582545600">- Add ovmf-bsc1163969-fix-DxeImageVerificationHandler.patch to fix
  dbx signature check (bsc#1163969, CVE-2019-14575)
  + Also change the order of several patches to distinguish the
    openssl patch
- Add ovmf-bsc1163927-fix-ip4dxe-and-arpdxe.patch to fix memory
  leakage in Ip4Dxe and ArpDxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1586174400">- Add ovmf-bsc1163927-fix-ping-and-ip6dxe.patch to fix crash and
  hang in ShellPkg and Ip6Dxe (bsc#1163927, CVE-2019-14559)</changelog>
  <changelog author="glin@suse.com" date="1595246400">- Add ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  + Enable LsiScsi explicitly since it's disabled by default</changelog>
  <changelog author="glin@suse.com" date="1599134400">- Add ovmf-bsc1175476-fix-DxeImageVerificationLib-overflow.patch
  to fix overflow in DxeImageVerificationHandler
  (bsc#1175476, CVE-2019-14562)</changelog>
  <changelog author="glin@suse.com" date="1606910400">- Add ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
  the potential NULL dereference in AuthenticodeVerify()
  (bsc#1177789, CVE-2019-14584)</changelog>
  <changelog author="glin@suse.com" date="1616068800">- Add ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption (bsc#1183578, CVE-2021-28211)
- Add ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion (bsc#1183579, CVE-2021-28210)</changelog>
  <changelog author="glin@suse.com" date="1620648000">- Build ovmf-x86_64-smm against Ia32X64 to enable S3 support
  (bsc#1185812)</changelog>
  <changelog author="glin@suse.com" date="1621598400">- Update ovmf-add-exclude-shell-flag.patch to include Ia32X64
  (bsc#1185812, bsc#1186284)</changelog>
</package>
<package pkgid="b8162cbddbb3bcbd67e52e9e78bc511e567d1a2a51f1de8ac3d100115078594c" name="qemu-ui-curses" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="6ae7d0f52534a3175f3eb280e1d29b0be54904e339693f4c8e2732d81d69bb0e" name="qemu-ui-curses" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a31fe310271ab4242b4087242f212b56d2baf3737e981b6e230f5e093de63114" name="qemu-ui-curses" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="a915436fd30026c2db794f41d2c7c09d48203f69a53de5f34ad51ca788c090e8" name="qemu-ui-curses" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="8145e0b56d176a1212518eb9909443682e15f6265f8a28aae23bf7445a81e311" name="qemu-ui-curses" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="9be68f8035a9c604628c097e29478ebec29e699436a01e6a6f4c5fbaa00e4714" name="qemu-ui-curses" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="7b073fbbc07fee6d91a73da2586e90c53bd2475ac029cba38b39ba8ff439365f" name="qemu-ui-curses" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="33de226a80077aa951facc5379017186383e8f8f30acaed89e58b5c02d0c864b" name="qemu-ui-curses" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="27e2e8e47d0ad48bbf1e5252ad4f636e9db63e41b6e9b199b67ff03ffc6dff38" name="qemu-ui-curses" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="886ab86c1519f7da596ae1fb9781e74d8120791907a19fd8850d3de86f0c5c2d" name="qemu-ui-curses" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="8bb307350ef320ab7a3a2815000dbd4e259658ed87fb60bf4872957c23db6f81" name="qemu-ui-curses" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="dcac59d6721594273c083d92478aa8fb3b5d0049288a8fa7b47f3f982acb42df" name="qemu-ui-curses" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="1b58640262b1c9623a9bfdc16f208443c4e8149cf710268a7b9833f57efaf988" name="qemu-ui-curses" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="33be19aeb39a6da46621e9a63067b65e860f8e00032149539bb2672eb6e7587a" name="qemu-ui-curses" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3ed0bd76fc794ff98fcea765af79129bcf95c6fd14892fbc89c54820cb751e0e" name="qemu-ui-curses" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2a5b5bbfa4e38fb1f87c2ec6c6c92ca435245e288f72819e2aea94fd46dd96d2" name="qemu-ui-gtk" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="23c24172dfc4e4969daded6d5eb3e31455e9d01871949ae070d95a4dfc722432" name="qemu-ui-gtk" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="3ee427544804eaf3c6aeef68262203f1b28c04e2941fea8bc7c02a2585b11c80" name="qemu-ui-gtk" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="99f1dc46e4cd8ac9b80182d441a2337db4d7774c1733c90f2e1ea30907a166da" name="qemu-ui-gtk" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="072f3ab453bdf817a7995f4b46f72b15f8a50952061528eb583c0444415cfc9a" name="qemu-ui-gtk" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="06ecf03ef3f40fe77aaa239ae990b21e51a5e214587f4b386686e8ffcbcc0609" name="qemu-ui-gtk" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="942612caba54ce02883b79caae2a40d1633b5f0c7ba18e4a112e784d28ff9d48" name="qemu-ui-gtk" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="c3afcbf5786f477e5e35c963e8dcbb9ae82d51edaaea82690b1a2d32857ee983" name="qemu-ui-gtk" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="9d0a8c3cb4e67f6334b9caba1fcc9e1a3fcbee258f6dba942626df0068f235ac" name="qemu-ui-gtk" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="1306797d3fec8266f0869be8d787f503b8271e787ddfec201ee7f7a8d184a470" name="qemu-ui-gtk" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="6beb6e1a26182bae39cab0d842766d8e31374756f26954b78cf80dea07714cae" name="qemu-ui-gtk" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="60ddd2bc3b3ce012405d4670b0e00d37c8124255b84d4f2195d06a90b935fce5" name="qemu-ui-gtk" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e8c3a972c5e9e85f3c5ad34bead88cfc06028e3588ac42501cd83d758d9e9d01" name="qemu-ui-gtk" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f06637c68d5a206217d399c0527d4b6dd0b91008be5c1ae189a25c609b959771" name="qemu-ui-gtk" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="4a27833064bf7548225a013590cb6cf6314ee28ae55e3dd41942cfb70ff3f36d" name="qemu-ui-gtk" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="6632190e1551fc84eeeeade87cf877279461142de784c91614116a0b7a9ef738" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e906d9eb71d2e25d3289b92c5a2b187e029f98f4836d2a28cefa05b8910f0321" name="qemu-ui-opengl" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d2ae5d70706a199984a1121e5e4dc0833aed02afab69a3ca935f4b4a8a9bb8ec" name="qemu-ui-opengl" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="b42432ac91b339c1a7c8c15a8fe412ff6ecc08a27eb1f01e16e89c4411c31447" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ddc49c56e3cf7e66c32c394b19e811f44135775ea8acde8b01582166d47c14c6" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="4a96a33375c4df766869c02172bf2e15c03d3de8854d43b78e4e6d0a2a3b7c43" name="qemu-ui-spice-app" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="2789bc1f81f449260a44eeb3c7d1f227eea5c9a298090c30e76868ce5dfca711" name="qemu-ui-spice-app" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="360105bb6241b1616a22f00d2803d3006d40710436a1d074d8981e07e93a95da" name="qemu-ui-spice-app" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="c3bf898d329a6c30eda0dc7313b6000ccab96ac8abd26fc1827c98767446ef40" name="qemu-ui-spice-app" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="537079b5c4b2f78ef0919b8b31d67b34b84fd9d424a52c8e4bc808e9d2c358fd" name="qemu-ui-spice-app" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="ae8cb8dbbe0da57afce9154c3362f04a1a4bc21455461cc9dce2132ccaeaaa0a" name="qemu-ui-spice-app" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="aed9803027e93adbd876f5b133e6d98c2ccb7e77b42747d1ae1535fcf57e38ba" name="qemu-ui-spice-app" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="171c42534b44e6f5a8048c877e29f8346ecc219f51c4e24c8e1ae4be8236b879" name="qemu-ui-spice-app" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c3cfeae65b17a64226a33e7fa5b0c3693b366bd132054215ad59f02158be7990" name="qemu-ui-spice-app" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="46e6dd8429523875ed006ce191201afd77157543d6359312bc3a6cfaefe0f3bd" name="qemu-ui-spice-app" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3b70c77644f2450678e50c81193baefb8def4c5c1c1a495803ed82035af90e6d" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="572134fd6aa3b90bdd6af40fa4eeb8988467cf6f2427242fcd1ad550a5b75f24" name="qemu-ui-spice-core" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="e3466e6de92f01a97c6a7d46b6d0482616daaba480b7ae2b1228648fb3fc267e" name="qemu-ui-spice-core" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="cc943800ad1ce1a89fb73d87a280dff5a2c66277f66ef46c837130fe2e07ef14" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="a2a2bd617108cf5fd98738074525f29e4b78625a91f60d16eec0d1cecd2b6be9" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d97c57ca7bd07ec46b10d95fc50aa38a7447928e30fbce92f40dc0f88f3dafed" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.11.0_0_g63451fc" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="215eff6c0108aac17f66621c6beb28589568271b08b9bff8996798b51300c678" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.12.0_0_ga698c89" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="74770833bd5b5dab1d2b2542bb90c8555c843f4ffb03ac9a81db988ae43a3ee5" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.12.1+" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="dcfb026d9639ff9bcafadabfc462969cccb0fc1f1cee66e754b433eb82bfb167" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.14.0_0_g155821a" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="ac40fe78d419da1764b97e69ec223e569c6712650116b187808a4041660c59bc" name="qemu-vhost-user-gpu" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="09ab5e13460aca87c926b81711ea90f2fb8045099de11031043fc453bfbd8e15" name="qemu-vhost-user-gpu" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="bfe930aa7fa8e31715b81f40c2b88b5bbdcd3e3adb797601c4d7bfbfcfb5885b" name="qemu-vhost-user-gpu" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="f72423836a7a4e8a92383b74c39f5ad534ffd542d39d60aa3caf2e1e4348022a" name="qemu-vhost-user-gpu" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="686d6ff4eecdf5807dc029d3943cb7c2ea6fb606dcd7166aa30c05757077f33a" name="qemu-vhost-user-gpu" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="4aaabac281dec75dc2f18d3a6ff0cb29fc7165110da6e7c15cbc78fbfc9c3835" name="qemu-vhost-user-gpu" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="88b020de4702a4387fe122182f045b991fe917b66f83b146fb0906e270bb1d15" name="qemu-vhost-user-gpu" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="1599292dab5148f0e2f1fe8e9e0812cc22c2a51c9f087a659a4daa2f51ca652b" name="qemu-vhost-user-gpu" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="2ffbbfcef71e3b7e2ea953b892474ec0cb780b75721b871bea903bac0884bfda" name="qemu-vhost-user-gpu" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="d6a05b26bb1385231c60b3e651903f623832dd87579ba57faddc04d582bea18e" name="qemu-vhost-user-gpu" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="96d3d68f62698e2ab0abc05c3762812e558abd31149f3647c74aefcaf0523509" name="qemu-x86" arch="aarch64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="68632dc50b16811d09ecf3106e20ae4b160e1f65c31bb6083b280c5649d934eb" name="qemu-x86" arch="i586">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="63e515fd1a54f92492114d7e26d77ca80258a154d94428269ae2349b85b366f5" name="qemu-x86" arch="ppc64le">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="ef78b5470f65dc8ea89f3c86a15efd0f361a88cb9164fc8a1109ac93c705cbc4" name="qemu-x86" arch="s390x">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="bbad862d20ad45c4ec2059433d815c221eb8f22357fa2f3e6b6b7573426e0f6f" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="9.46.1"/>
  <changelog author="brogers@suse.com" date="1572955200">- Fix use-after-free in slirp (CVE-2019-15890 bsc#1149811)
  0141-slrip-ip_reass-Fix-use-after-free.patch
- Fix potential DOS in lsi scsi controller emulation (CVE-2019-12068
  bsc#1146873)
  0142-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
- Expose taa-no "feature", indicating CPU does not have the
  TSX Async Abort vulnerability. (CVE-2019-11135 bsc#1152506)
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
- Expose pschange-mc-no "feature", indicating CPU does not have
  the page size change machine check vulnerability (CVE-2018-12207
  bsc#1155812)
  0145-target-i386-Add-pschange-mc-no-feat.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589284800">- Follow on patches for bsc#1123156. These patches are for fixing
  similar problems as for the original fix prompting this issue
  (CVE-2019-6778)
  0146-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
- Fix potential OOB accesses in slirp (CVE-2020-8608 bsc#1163018
  CVE-2020-7039 bsc#1161066)
  0149-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
- Fix use after free in slirp (CVE-2020-1983 bsc#1170940)
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371200">- Fix potential DoS due to memory leak in vnc disconnect
  (CVE-2019-20382 bsc#1165776)
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
- Fix potential OOB access in iSCSI client code (CVE-2020-1711
  bsc#1166240)
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1589371201">- Increase disk space requirement for all archs in _constraints file
- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0157-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0158-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0076-seccomp-allow-sched_setscheduler-wi.patch
  - &gt; 0089-seccomp-allow-sched_setscheduler-wi.patch
  0077-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  - &gt; 0090-seccomp-prefer-SCMP_ACT_KILL_PROCES.patch
  0078-configure-require-libseccomp-2.2.0.patch
  - &gt; 0091-configure-require-libseccomp-2.2.0.patch
  0079-seccomp-set-the-seccomp-filter-to-a.patch
  - &gt; 0092-seccomp-set-the-seccomp-filter-to-a.patch
  0080-linux-headers-update.patch
  - &gt; 0087-linux-headers-update.patch
  0081-s390x-kvm-add-etoken-facility.patch
  - &gt; 0088-s390x-kvm-add-etoken-facility.patch
  0082-sandbox-disable-sandbox-if-CONFIG_S.patch
  - &gt; 0093-sandbox-disable-sandbox-if-CONFIG_S.patch
  0083-seccomp-check-TSYNC-host-capability.patch
  - &gt; 0094-seccomp-check-TSYNC-host-capability.patch
  0084-linux-user-init_guest_space-Try-to-.patch
  - &gt; 0194-linux-user-init_guest_space-Try-to-.patch
  0085-ne2000-fix-possible-out-of-bound-ac.patch
  - &gt; 0095-ne2000-fix-possible-out-of-bound-ac.patch
  0086-rtl8139-fix-possible-out-of-bound-a.patch
  - &gt; 0096-rtl8139-fix-possible-out-of-bound-a.patch
  0087-pcnet-fix-possible-buffer-overflow.patch
  - &gt; 0097-pcnet-fix-possible-buffer-overflow.patch
  0088-net-ignore-packet-size-greater-than.patch
  - &gt; 0098-net-ignore-packet-size-greater-than.patch
  0089-lsi53c895a-check-message-length-val.patch
  - &gt; 0099-lsi53c895a-check-message-length-val.patch
  0090-include-Add-IEC-binary-prefixes-in-.patch
  - &gt; 0100-include-Add-IEC-binary-prefixes-in-.patch
  0091-nvme-fix-out-of-bounds-access-to-th.patch
  - &gt; 0101-nvme-fix-out-of-bounds-access-to-th.patch
  0092-hw-char-serial-Only-retry-if-qemu_c.patch
  - &gt; 0102-hw-char-serial-Only-retry-if-qemu_c.patch
  0093-hw-char-serial-retry-write-if-EAGAI.patch
  - &gt; 0103-hw-char-serial-retry-write-if-EAGAI.patch
  0094-s390x-cpumodels-add-z14-Model-ZR1.patch
  - &gt; 0086-s390x-cpumodels-add-z14-Model-ZR1.patch
  0095-linux-user-write-fd-NULL-0-parity-w.patch
  - &gt; 0104-linux-user-write-fd-NULL-0-parity-w.patch
  0096-linux-user-make-pwrite64-pread64-fd.patch
  - &gt; 0105-linux-user-make-pwrite64-pread64-fd.patch
  0097-xen-add-a-meaningful-declaration-of.patch
  - &gt; 0107-xen-add-a-meaningful-declaration-of.patch
  0098-xen_backend-add-grant-table-helpers.patch
  - &gt; 0108-xen_backend-add-grant-table-helpers.patch
  0099-xen_disk-remove-open-coded-use-of-l.patch
  - &gt; 0109-xen_disk-remove-open-coded-use-of-l.patch
  0100-xen-remove-other-open-coded-use-of-.patch
  - &gt; 0110-xen-remove-other-open-coded-use-of-.patch
  0101-xen_backend-add-an-emulation-of-gra.patch
  - &gt; 0111-xen_backend-add-an-emulation-of-gra.patch
  0102-xen_disk-remove-use-of-grant-map-un.patch
  - &gt; 0112-xen_disk-remove-use-of-grant-map-un.patch
  0103-xen_disk-use-a-single-entry-iovec.patch
  - &gt; 0113-xen_disk-use-a-single-entry-iovec.patch
  0104-xen_disk-Avoid-repeated-memory-allo.patch
  - &gt; 0114-xen_disk-Avoid-repeated-memory-allo.patch
  0105-xen-ignore-live-parameter-from-xen-.patch
  - &gt; 0106-xen-ignore-live-parameter-from-xen-.patch
  0106-slirp-check-data-length-while-emula.patch
  - &gt; 0115-slirp-check-data-length-while-emula.patch
  0107-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  - &gt; 0116-usb-mtp-use-O_NOFOLLOW-and-O_CLOEXE.patch
  0108-9p-fix-QEMU-crash-when-renaming-fil.patch
  - &gt; 0117-9p-fix-QEMU-crash-when-renaming-fil.patch
  0109-9p-write-lock-path-in-v9fs_co_open2.patch
  - &gt; 0118-9p-write-lock-path-in-v9fs_co_open2.patch
  0110-9p-take-write-lock-on-fid-path-upda.patch
  - &gt; 0119-9p-take-write-lock-on-fid-path-upda.patch
  0111-ppc-pnv-check-size-before-data-buff.patch
  - &gt; 0120-ppc-pnv-check-size-before-data-buff.patch
  0112-s390x-tcg-introduce-and-use-s390_pr.patch
  - &gt; 0121-s390x-tcg-introduce-and-use-s390_pr.patch
  0113-s390x-diag-pass-the-retaddr-into-ha.patch
  - &gt; 0122-s390x-diag-pass-the-retaddr-into-ha.patch
  0114-s390x-Return-specification-exceptio.patch
  - &gt; 0123-s390x-Return-specification-exceptio.patch
  0115-slirp-check-sscanf-result-when-emul.patch
  - &gt; 0124-slirp-check-sscanf-result-when-emul.patch
  0116-ppc-add-host-serial-and-host-model-.patch
  - &gt; 0125-ppc-add-host-serial-and-host-model-.patch
  0117-i2c-ddc-fix-oob-read.patch
  - &gt; 0126-i2c-ddc-fix-oob-read.patch
  0118-device_tree.c-Don-t-use-load_image.patch
  - &gt; 0127-device_tree.c-Don-t-use-load_image.patch
  0119-spapr-Simplify-handling-of-host-ser.patch
  - &gt; 0128-spapr-Simplify-handling-of-host-ser.patch
  0120-target-i386-define-md-clear-bit.patch
  - &gt; 0130-target-i386-define-md-clear-bit.patch
  0121-tests-fix-TLS-handshake-failure-wit.patch
  - &gt; 0189-tests-fix-TLS-handshake-failure-wit.patch
  0122-s390x-cpumodel-ignore-csske-for-exp.patch
  - &gt; 0131-s390x-cpumodel-ignore-csske-for-exp.patch
  0123-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  - &gt; 0076-x86-cpu-Enable-new-SSE-AVX-AVX512-c.patch
  0124-i386-Add-Intel-Processor-Trace-feat.patch
  - &gt; 0132-i386-Add-Intel-Processor-Trace-feat.patch
  0125-i386-Add-new-MSR-indices-for-IA32_P.patch
  - &gt; 0133-i386-Add-new-MSR-indices-for-IA32_P.patch
  0126-i386-Add-CPUID-bit-and-feature-word.patch
  - &gt; 0134-i386-Add-CPUID-bit-and-feature-word.patch
  0127-i386-Add-CPUID-bit-for-WBNOINVD.patch
  - &gt; 0135-i386-Add-CPUID-bit-for-WBNOINVD.patch
  0128-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  - &gt; 0136-kvm-Add-support-to-KVM_GET_MSR_FEAT.patch
  0129-x86-Data-structure-changes-to-suppo.patch
  - &gt; 0137-x86-Data-structure-changes-to-suppo.patch
  0131-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  - &gt; 0139-kvm-Use-KVM_GET_MSR_INDEX_LIST-for-.patch
  0132-i386-kvm-Disable-arch_capabilities-.patch
  - &gt; 0140-i386-kvm-Disable-arch_capabilities-.patch
  0133-i386-Make-arch_capabilities-migrata.patch
  - &gt; 0141-i386-Make-arch_capabilities-migrata.patch
  0130-x86-define-a-new-MSR-based-feature-.patch
  - &gt; 0138-x86-define-a-new-MSR-based-feature-.patch
  0134-target-i386-add-MDS-NO-feature.patch
  - &gt; 0142-target-i386-add-MDS-NO-feature.patch
  0135-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0143-xen_disk-Disable-file-locking-for-t.patch
  0136-qxl-check-release-info-object.patch
  - &gt; 0144-qxl-check-release-info-object.patch
  0137-qemu-bridge-helper-restrict-interfa.patch
  - &gt; 0145-qemu-bridge-helper-restrict-interfa.patch
  0138-file-posix-Skip-effectiveless-OFD-l.patch
  - &gt; 0190-file-posix-Skip-effectiveless-OFD-l.patch
  0139-block-file-posix-do-not-fail-on-unl.patch
  - &gt; 0191-block-file-posix-do-not-fail-on-unl.patch
  0140-Fix-heap-overflow-in-ip_reass-on-bi.patch
  - &gt; 0146-Fix-heap-overflow-in-ip_reass-on-bi.patch
  0141-slrip-ip_reass-Fix-use-after-free.patch
  - &gt; 0160-slrip-ip_reass-Fix-use-after-free.patch
  0142-lsi-use-enum-type-for-s-waiting.patch
  - &gt; 0161-lsi-use-enum-type-for-s-waiting.patch
  0143-scsi-lsi-exit-infinite-loop-while-e.patch
  - &gt; 0162-scsi-lsi-exit-infinite-loop-while-e.patch
  0144-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0163-target-i386-Export-TAA_NO-bit-to-gu.patch
  0145-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0164-target-i386-Add-pschange-mc-no-feat.patch
  0146-slirp-fix-big-little-endian-convers.patch
  - &gt; 0176-slirp-fix-big-little-endian-convers.patch
  0147-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0177-slirp-ensure-there-is-enough-space-.patch
  0148-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0178-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0149-util-add-slirp_fmt-helpers.patch
  - &gt; 0179-util-add-slirp_fmt-helpers.patch
  0150-tcp_emu-Fix-oob-access.patch
  - &gt; 0180-tcp_emu-Fix-oob-access.patch
  0151-slirp-use-correct-size-while-emulat.patch
  - &gt; 0181-slirp-use-correct-size-while-emulat.patch
  0152-slirp-use-correct-size-while-emulat.patch
  - &gt; 0182-slirp-use-correct-size-while-emulat.patch
  0153-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0183-tcp_emu-fix-unsafe-snprintf-usages.patch
  0154-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0184-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0155-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0185-vnc-fix-memory-leak-when-vnc-discon.patch
  0156-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0186-iscsi-Cap-block-count-from-GET-LBA-.patch
  0157-es1370-check-total-frame-count-agai.patch
  - &gt; 0187-es1370-check-total-frame-count-agai.patch
  0158-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0188-hw-core-loader-Fix-possible-crash-i.patch
  0159-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0193-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  Make-installed-scripts-explicitly-python3.patch
  - &gt; 0192-Make-installed-scripts-explicitly-p.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  skiboot-GCC7-fixes-for-Wimplicit-fallthr.patch
  - &gt; 4000-GCC7-fixes-for-Wimplicit-fallthroug.patch
  skiboot-libc-stdio-vsnprintf.c-add-expli.patch
  - &gt; 4001-libc-stdio-vsnprintf.c-add-explicit.patch
  skiboot-build-LDFLAGS-pass-pie-flag-explicitly-to-ld.patch
  - &gt; 4002-build-LDFLAGS-pass-pie-flag-explici.patch
  ui-keycodemapdb-Add-missing-QKeyCode-val.patch
  - &gt; 7000-Add-missing-QKeyCode-values-for-JIS.patch
  ui-keycodemapdb-Fix-compat-with-py3-dict.patch
  - &gt; 7001-Fix-compat-with-py3-dict-keys-value.patch
- These are added since we now share the patches with the v2.1.2
  based  SLE12-SP4 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0077-hostmem-file-add-align-option.patch
  0078-nvdimm-add-a-macro-for-property-lab.patch
  0079-pc-dimm-make-qmp_pc_dimm_device_lis.patch
  0080-qmp-distinguish-PC-DIMM-and-NVDIMM-.patch
  0081-hw-acpi-build-build-SRAT-memory-aff.patch
  0082-tests-bios-tables-test-add-test-cas.patch
  0083-nvdimm-add-unarmed-option.patch
  0084-nvdimm-fix-typo-in-label-size-defin.patch
  0085-pc-acpi-fix-memory-hotplug-regressi.patch
  0147-Avoid-sending-whole-huge-pages-duri.patch
  0148-qcow2-Give-the-refcount-cache-the-m.patch
  0149-docs-Document-the-new-default-sizes.patch
  0150-qcow2-Fix-Coverity-warning-when-cal.patch
  0151-qcow2-Options-documentation-fixes.patch
  0152-include-Add-a-lookup-table-of-sizes.patch
  0153-qcow2-Make-sizes-more-humanly-reada.patch
  0154-qcow2-Avoid-duplication-in-setting-.patch
  0155-qcow2-Assign-the-L2-cache-relativel.patch
  0156-qcow2-Increase-the-default-upper-li.patch
  0157-qcow2-Resize-the-cache-upon-image-r.patch
  0158-qcow2-Set-the-default-cache-clean-i.patch
  0159-qcow2-Explicit-number-replaced-by-a.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch
- Drop the 'ampersand 0x25 shift altgr' line in pt-br keymap file
  (bsc#1129962)
  0129-pc-bios-keymaps-Drop-the-error-keym.patch
- Fix migration failure with error message: "error while loading
  state section id 3(ram) (bsc#1154790)
  0165-scsi-provide-general-purpose-functi.patch
  0166-scsi-replace-hex-constants-with-def.patch
  0167-scsi-fix-scsi_convert_sense-crash-w.patch
  0168-scsi-disk-fix-double-completion-of-.patch
  0169-scsi-disk-fix-rerror-werror-ignore.patch
  0170-scsi-disk-Fix-crash-if-underlying-h.patch
  0171-scsi-disk-pass-sense-correctly-for-.patch
  0172-scsi-explicitly-list-guest-recovera.patch
  0173-scsi-add-guest-recoverable-ZBC-erro.patch
  0174-iscsi-fix-busy-timeout-task-set-ful.patch
  0175-iscsi-base-all-handling-of-check-co.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0195-sm501-Add-some-more-unimplemented-r.patch
  0196-sm501-Use-values-from-the-pitch-reg.patch
  0197-sm501-Implement-negated-destination.patch
  0198-sm501-Log-unimplemented-raster-oper.patch
  0199-sm501-Fix-support-for-non-zero-fram.patch
  0200-sm501-Set-updated-region-dirty-afte.patch
  0201-sm501-Adjust-endianness-of-pixel-va.patch
  0202-sm501-Convert-printf-abort-to-qemu_.patch
  0203-sm501-Shorten-long-variable-names-i.patch
  0204-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0205-sm501-Clean-up-local-variables-in-s.patch
  0206-sm501-Replace-hand-written-implemen.patch
  0207-sm501-add-qemu-log.h-include.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0208-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0209-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0210-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0211-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0212-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0213-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0214-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0215-ide-atapi-assert-that-the-buffer-po.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0216-hw-pci-host-add-pci-intack-write-me.patch
  0217-vfio-add-quirk-device-write-method.patch
  0218-prep-add-ppc-parity-write-method.patch
  0219-spapr_pci-add-spapr-msi-read-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0220-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0221-net-introduce-qemu_receive_packet.patch
  0222-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0223-e1000-switch-to-use-qemu_receive_pa.patch
  0224-dp8393x-switch-to-use-qemu_receive_.patch
  0225-sungem-switch-to-use-qemu_receive_p.patch
  0226-tx_pkt-switch-to-use-qemu_receive_p.patch
  0227-pcnet-switch-to-use-qemu_receive_pa.patch
  0228-cadence_gem-switch-to-use-qemu_rece.patch
  0229-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0230-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386
  0231-exec-set-map-length-to-zero-when-re.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0232-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0233-net-vmxnet3-validate-configuration-.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0234-hw-net-xgmac-Fix-buffer-overflow-in.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0235-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0236-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620734400">- Fix OOB access during mmio operations
  (CVE-2020-13754, bsc#1172382)
  0238-libqos-pci-pc-use-32-bit-write-for-.patch
  0239-libqos-usb-hcd-ehci-use-32-bit-writ.patch
  0240-memory-Revert-memory-accept-mismatc.patch
  0241-Fixed-integer-overflow-in-e1000e.patch
  0242-xhci-fix-valid.max_access_size-to-a.patch
  0243-acpi-accept-byte-and-word-access-to.patch
  0244-hw-char-bcm2835_aux-Allow-less-than.patch
- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0237-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="fe84565ae3597dff9470002c2d2839bbc0816f75e968745034b9e211e6893ae7" name="qemu-x86" arch="aarch64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="bfd6e34f41ce938120f39ddf47b1977d63635040d177fa015421265156eb5ef6" name="qemu-x86" arch="i586">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="53fd0eff89a3cb9f2adc561ccc79825669f2fcb247d84cf6b74ac6edf52df531" name="qemu-x86" arch="ppc64le">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="e75739580f86179cc86d5247bfc695507c2bcd3aa69f118e1d4ad23f950f798e" name="qemu-x86" arch="s390x">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="591db27d2e6b5b7ec5e6711c0459f58467c5a60f316dee2779dbbdaec5660bb8" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="3.1.1.1" rel="9.27.2"/>
  <changelog author="brogers@suse.com" date="1589371200">- Misc. fixes to the in-package support documentation</changelog>
  <changelog author="brogers@suse.com" date="1589544000">- Fix migration rate limiting when huge pages in use (bsc#1167816)
  0125-migration-Rate-limit-inside-host-pa.patch</changelog>
  <changelog author="lma@suse.com" date="1611835200">- Use '%service_del_postun_without_restart' instead of '%service_del_postun'
  to avoid "Failed to try-restart qemu-ga@.service" error while updating the
  qemu-guest-agent. (bsc#1178565)</changelog>
  <changelog author="brogers@suse.com" date="1612353600">- Fix OOB access possibility in ES1370 audio device emulation
  (CVE-2020-13361 bsc#1172384)
  0126-es1370-check-total-frame-count-agai.patch
- Fix OOB access in ROM loading (CVE-2020-13765 bsc#1172478)
  0127-hw-core-loader-Fix-possible-crash-i.patch
- Fix OOB access while processing USB packets (CVE-2020-14364
  bsc#1175441)
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
- Fix DoS in packet processing of various emulated NICs
  (CVE-2020-16092 bsc#1174641)
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
- Fix buffer overflow in the XGMAC device (CVE-2020-15863
  bsc#1174386)
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch</changelog>
  <changelog author="brogers@suse.com" date="1612958400">- Apply fixes to qemu scsi passthrough with respect to timeout and
  error conditions, including using more correct status codes. Add
  more qemu tracing which helped track down these issues
  (bsc#1178049)
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
- Fix OOB access in ARM interrupt handling (CVE-2021-20221
  bsc#1181933)
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
- Tweaks to spec file for better formatting, and remove not needed
  BuildRequires for e2fsprogs-devel and libpcap-devel</changelog>
  <changelog author="brogers@suse.com" date="1615464000">- Use same git bundle based workflow as used in more recent qemu
  packages, with switch to github.com remote repo backing.
  This results in patches previously not managed by git to now be
  numbered (hence the renames below). Also since qemu-linux-user is
  not supported, we don't take extra effort to include it in the
  workflow, but will now manually update it for patches which are
  found to be important to apply there
  Since package stability is very important for these older qemu
  releases, the change has been carefully reviewed to ensure no
  negative effects result
  * Patches renamed:
  0066-include-update-Linux-headers-to-4.2.patch
  - &gt; 0068-include-update-Linux-headers-to-4.2.patch
  0067-linux-headers-add-linux-mman.h.patch
  - &gt; 0069-linux-headers-add-linux-mman.h.patch
  0068-linux-headers-update-against-Linux-.patch
  - &gt; 0070-linux-headers-update-against-Linux-.patch
  0069-s390x-cpumodel-Miscellaneous-Instru.patch
  - &gt; 0071-s390x-cpumodel-Miscellaneous-Instru.patch
  0070-s390x-cpumodel-mepochptff-warn-when.patch
  - &gt; 0072-s390x-cpumodel-mepochptff-warn-when.patch
  0071-s390x-cpumodel-msa9-facility.patch
  - &gt; 0073-s390x-cpumodel-msa9-facility.patch
  0072-s390x-cpumodel-vector-enhancements.patch
  - &gt; 0074-s390x-cpumodel-vector-enhancements.patch
  0073-s390x-cpumodel-enhanced-sort-facili.patch
  - &gt; 0075-s390x-cpumodel-enhanced-sort-facili.patch
  0074-s390x-cpumodel-add-Deflate-conversi.patch
  - &gt; 0076-s390x-cpumodel-add-Deflate-conversi.patch
  0075-s390x-cpumodel-add-gen15-defintions.patch
  - &gt; 0077-s390x-cpumodel-add-gen15-defintions.patch
  0076-s390x-cpumodel-wire-up-8561-and-856.patch
  - &gt; 0078-s390x-cpumodel-wire-up-8561-and-856.patch
  0077-s390x-cpumodel-Rework-CPU-feature-d.patch
  - &gt; 0079-s390x-cpumodel-Rework-CPU-feature-d.patch
  0078-s390-cpumodel-fix-description-for-t.patch
  - &gt; 0080-s390-cpumodel-fix-description-for-t.patch
  0079-s390x-cpumodel-also-change-name-of-.patch
  - &gt; 0081-s390x-cpumodel-also-change-name-of-.patch
  0080-s390x-cpumodel-remove-esort-from-th.patch
  - &gt; 0082-s390x-cpumodel-remove-esort-from-th.patch
  0081-linux-user-fix-__NR_semtimedop-unde.patch
  - &gt; 0100-linux-user-fix-__NR_semtimedop-unde.patch
  0082-pc-bios-s390-ccw-Use-proper-registe.patch
  - &gt; 0083-pc-bios-s390-ccw-Use-proper-registe.patch
  0083-s390-vfio-ccw-Add-bootindex-propert.patch
  - &gt; 0084-s390-vfio-ccw-Add-bootindex-propert.patch
  0084-s390-bios-decouple-cio-setup-from-v.patch
  - &gt; 0085-s390-bios-decouple-cio-setup-from-v.patch
  0085-s390-bios-decouple-common-boot-logi.patch
  - &gt; 0086-s390-bios-decouple-common-boot-logi.patch
  0086-s390-bios-Clean-up-cio.h.patch
  - &gt; 0087-s390-bios-Clean-up-cio.h.patch
  0087-s390-bios-Decouple-channel-i-o-logi.patch
  - &gt; 0088-s390-bios-Decouple-channel-i-o-logi.patch
  0088-s390-bios-Map-low-core-memory.patch
  - &gt; 0089-s390-bios-Map-low-core-memory.patch
  0089-s390-bios-ptr2u32-and-u32toptr.patch
  - &gt; 0090-s390-bios-ptr2u32-and-u32toptr.patch
  0090-s390-bios-Support-for-running-forma.patch
  - &gt; 0091-s390-bios-Support-for-running-forma.patch
  0091-s390-bios-cio-error-handling.patch
  - &gt; 0092-s390-bios-cio-error-handling.patch
  0092-s390-bios-Extend-find_dev-for-non-v.patch
  - &gt; 0093-s390-bios-Extend-find_dev-for-non-v.patch
  0093-s390-bios-Factor-finding-boot-devic.patch
  - &gt; 0094-s390-bios-Factor-finding-boot-devic.patch
  0094-s390-bios-Refactor-virtio-to-run-ch.patch
  - &gt; 0095-s390-bios-Refactor-virtio-to-run-ch.patch
  0095-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0096-s390-bios-Use-control-unit-type-to-.patch
  0096-s390-bios-Add-channel-command-codes.patch
  - &gt; 0097-s390-bios-Add-channel-command-codes.patch
  0097-s390-bios-Support-booting-from-real.patch
  - &gt; 0098-s390-bios-Support-booting-from-real.patch
  0098-s390-bios-Use-control-unit-type-to-.patch
  - &gt; 0099-s390-bios-Use-control-unit-type-to-.patch
  0099-xen_disk-Disable-file-locking-for-t.patch
  - &gt; 0066-xen_disk-Disable-file-locking-for-t.patch
  0100-target-i386-Export-TAA_NO-bit-to-gu.patch
  - &gt; 0101-target-i386-Export-TAA_NO-bit-to-gu.patch
  0101-target-i386-Add-pschange-mc-no-feat.patch
  - &gt; 0102-target-i386-Add-pschange-mc-no-feat.patch
  0102-include-revert-part-of-the-linux-he.patch
  - &gt; 0103-include-revert-part-of-the-linux-he.patch
  0103-scsi-disk-pass-sense-correctly-for-.patch
  - &gt; 0104-scsi-disk-pass-sense-correctly-for-.patch
  0104-scsi-explicitly-list-guest-recovera.patch
  - &gt; 0105-scsi-explicitly-list-guest-recovera.patch
  0105-scsi-add-guest-recoverable-ZBC-erro.patch
  - &gt; 0106-scsi-add-guest-recoverable-ZBC-erro.patch
  0106-iscsi-fix-busy-timeout-task-set-ful.patch
  - &gt; 0107-iscsi-fix-busy-timeout-task-set-ful.patch
  0107-iscsi-base-all-handling-of-check-co.patch
  - &gt; 0108-iscsi-base-all-handling-of-check-co.patch
  0108-slirp-fix-big-little-endian-convers.patch
  - &gt; 0109-slirp-fix-big-little-endian-convers.patch
  0109-slirp-ensure-there-is-enough-space-.patch
  - &gt; 0110-slirp-ensure-there-is-enough-space-.patch
  0110-slirp-don-t-manipulate-so_rcv-in-tc.patch
  - &gt; 0111-slirp-don-t-manipulate-so_rcv-in-tc.patch
  0111-util-add-slirp_fmt-helpers.patch
  - &gt; 0112-util-add-slirp_fmt-helpers.patch
  0112-tcp_emu-Fix-oob-access.patch
  - &gt; 0113-tcp_emu-Fix-oob-access.patch
  0113-slirp-use-correct-size-while-emulat.patch
  - &gt; 0115-slirp-use-correct-size-while-emulat.patch
  0115-tcp_emu-fix-unsafe-snprintf-usages.patch
  - &gt; 0116-tcp_emu-fix-unsafe-snprintf-usages.patch
  0116-display-bochs-fix-pcie-support.patch
  - &gt; 0117-display-bochs-fix-pcie-support.patch
  0117-vnc-fix-memory-leak-when-vnc-discon.patch
  - &gt; 0118-vnc-fix-memory-leak-when-vnc-discon.patch
  0118-iscsi-Cap-block-count-from-GET-LBA-.patch
  - &gt; 0119-iscsi-Cap-block-count-from-GET-LBA-.patch
  0119-tests-qemu-iotests-common.filter-ad.patch
  - &gt; 0120-tests-qemu-iotests-common.filter-ad.patch
  0120-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  - &gt; 0122-Revert-i386-Add-CPUID-bit-for-PCONF.patch
  0121-i386-Disable-OSPKE-on-CPU-model-def.patch
  - &gt; 0123-i386-Disable-OSPKE-on-CPU-model-def.patch
  0122-i386-indicate-that-pconfig-feature-.patch
  - &gt; 0124-i386-indicate-that-pconfig-feature-.patch
  0123-pc-bios-s390x-Save-iplb-location-in.patch
  - &gt; 0121-pc-bios-s390x-Save-iplb-location-in.patch
  0124-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  - &gt; 0125-Fix-use-afte-free-in-ip_reass-CVE-2.patch
  0125-migration-Rate-limit-inside-host-pa.patch
  - &gt; 0126-migration-Rate-limit-inside-host-pa.patch
  0126-es1370-check-total-frame-count-agai.patch
  - &gt; 0127-es1370-check-total-frame-count-agai.patch
  0127-hw-core-loader-Fix-possible-crash-i.patch
  - &gt; 0128-hw-core-loader-Fix-possible-crash-i.patch
  0128-usb-fix-setup_len-init-CVE-2020-143.patch
  - &gt; 0129-usb-fix-setup_len-init-CVE-2020-143.patch
  0129-hw-net-net_tx_pkt-fix-assertion-fai.patch
  - &gt; 0130-hw-net-net_tx_pkt-fix-assertion-fai.patch
  0130-hw-net-xgmac-Fix-buffer-overflow-in.patch
  - &gt; 0131-hw-net-xgmac-Fix-buffer-overflow-in.patch
  0131-scsi-disk-Convert-from-DPRINTF-macr.patch
  - &gt; 0159-scsi-disk-Convert-from-DPRINTF-macr.patch
  0132-scsi-generic-Convert-from-DPRINTF-m.patch
  - &gt; 0160-scsi-generic-Convert-from-DPRINTF-m.patch
  0133-virtio-scsi-trace-events.patch
  - &gt; 0161-virtio-scsi-trace-events.patch
  0134-scsi-make-io_timeout-settable.patch
  - &gt; 0162-scsi-make-io_timeout-settable.patch
  0135-scsi-add-tracing-for-SG_IO-commands.patch
  - &gt; 0163-scsi-add-tracing-for-SG_IO-commands.patch
  0136-scsi-disk-set-default-I-O-timeout-t.patch
  - &gt; 0164-scsi-disk-set-default-I-O-timeout-t.patch
  0137-virtio-scsi-translate-SG_IO-host-st.patch
  - &gt; 0165-virtio-scsi-translate-SG_IO-host-st.patch
  0138-scsi-generic-check-for-additional-S.patch
  - &gt; 0166-scsi-generic-check-for-additional-S.patch
  0139-scsi-disk-fold-SG_IO-errors-back-in.patch
  - &gt; 0167-scsi-disk-fold-SG_IO-errors-back-in.patch
  0140-scsi-disk-trace-rw-errors.patch
  - &gt; 0168-scsi-disk-trace-rw-errors.patch
  0141-virtio-scsi-change-DID-TIMEOUT-hand.patch
  - &gt; 0169-virtio-scsi-change-DID-TIMEOUT-hand.patch
  0142-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  - &gt; 0170-hw-intc-arm_gic-Fix-interrupt-ID-in.patch
  seabios-use-python2-explicitly-as-needed.patch
  - &gt; 1000-seabios-use-python2-explicitly-as-n.patch
  seabios-switch-to-python3-as-needed.patch
  - &gt; 1001-seabios-switch-to-python3-as-needed.patch
  seabios-fix_cross_compilation.patch
  - &gt; 1002-seabios-fix_cross_compilation.patch
  ipxe-stub-out-the-SAN-req-s-in-int13.patch
  - &gt; 2000-ipxe-stub-out-the-SAN-req-s-in-int1.patch
  ipxe-stable-buildid.patch
  - &gt; 2001-ipxe-stable-buildid.patch
  ipxe-use-gcc6-for-more-compact-code.patch
  - &gt; 2002-ipxe-use-gcc6-for-more-compact-code.patch
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch
  - &gt; 2003-ipxe-efi-guard-strncpy-with-gcc-war.patch
  ipxe-fix-build.patch
  - &gt; 2004-ipxe-fix-build.patch
  ipxe-efi-Simplify-diagnostic-for-NULL-handle.patch
  - &gt; 2005-ipxe-efi-Simplify-diagnostic-for-NU.patch
  ipxe-build-Disable-gcc-address-of-packed-member-warning.patch
  - &gt; 2006-ipxe-build-Disable-gcc-address-of-p.patch
  sgabios-stable-buildid.patch
  - &gt; 3000-sgabios-stable-buildid.patch
  sgabios-fix-cross-build.patch
  - &gt; 3001-sgabios-fix-cross-build.patch
  skiboot-hdata-i2c.c-fix-building-with-gcc8.patch
  - &gt; 4000-hdata-i2c.c-fix-building-with-gcc8.patch
- These are added since we now share the patches with the v3.1.1.1
  based  SLE12-SP5 qemu, but they are commented out in this spec
  file, since they are feature requests not targeting this release:
  0067-s390-bios-Skip-bootmap-signature-en.patch
  0132-vfio-Make-vfio_get_region_info_cap-.patch
  0133-s390x-pci-rename-hotplug-handler-ca.patch
  0134-s390x-pci-Use-hotplug_dev-instead-o.patch
  0135-s390-avoid-potential-null-dereferen.patch
  0136-s390x-pci-Always-delete-and-free-th.patch
  0137-s390x-pci-add-common-function-measu.patch
  0138-s390x-pci-Move-some-hotplug-checks-.patch
  0139-s390x-pci-Ignore-the-unplug-call-if.patch
  0140-s390x-pci-Introduce-unplug-requests.patch
  0141-Makefile-generate-header-file-with-.patch
  0142-i386-kvm-support-guest-access-CORE-.patch
  0143-linux-headers-update-against-v5.4-r.patch
  0144-linux-headers-Update.patch
  0145-linux-headers-Update.patch
  0146-linux-headers-update.patch
  0147-linux-headers-update-against-Linux-.patch
  0148-Linux-headers-update.patch
  0149-linux-headers-sync-to-5.9-rc4.patch
  0150-linux-headers-sync-to-5.9-rc7.patch
  0151-linux-headers-update-against-5.10-r.patch
  0152-vfio-Create-shared-routine-for-scan.patch
  0153-vfio-Find-DMA-available-capability.patch
  0154-s390x-pci-Add-routine-to-get-the-vf.patch
  0155-s390x-pci-Move-header-files-to-incl.patch
  0156-s390x-pci-Honor-DMA-limits-set-by-v.patch
  0157-s390x-fix-build-for-without-default.patch
  0158-s390x-s390-virtio-ccw-Reset-PCI-dev.patch
- Fix potential privilege escalation in virtfs (CVE-2021-20181
  bsc#1182137)
  0000-9pfs-Fully-restart-unreclaim-loop-C.patch</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  0171-sm501-Convert-printf-abort-to-qemu_.patch
  0172-sm501-Shorten-long-variable-names-i.patch
  0173-sm501-Use-BIT-x-macro-to-shorten-co.patch
  0174-sm501-Clean-up-local-variables-in-s.patch
  0175-sm501-Replace-hand-written-implemen.patch
- Fix OOB access possibility in MegaRAID SAS 8708EM2 emulation
  (CVE-2020-13362 bsc#1172383)
  0176-megasas-use-unsigned-type-for-reply.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  0177-hw-xhci-check-return-value-of-usb_p.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  0178-hw-ehci-check-return-value-of-usb_p.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  0179-hw-usb-hcd-ohci-check-len-and-frame.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  0180-hw-usb-hcd-ohci-check-for-processed.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  0181-net-remove-an-assert-call-in-eth_ge.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  0182-hw-net-e1000e-advance-desc_offset-i.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  0183-ide-atapi-assert-that-the-buffer-po.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  0184-memory-clamp-cached-translation-in-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  0185-hw-pci-host-add-pci-intack-write-me.patch
  0186-pci-host-designware-add-pcie-msi-re.patch
  0187-vfio-add-quirk-device-write-method.patch
  0188-prep-add-ppc-parity-write-method.patch
  0189-spapr_pci-add-spapr-msi-read-method.patch
  0190-hw-misc-tz-ppc-Support-having-unuse.patch
  0191-tz-ppc-add-dummy-read-write-methods.patch
  0192-imx7-ccm-add-digprog-mmio-write-met.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  0193-e1000-fail-early-for-evil-descripto.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  0194-net-introduce-qemu_receive_packet.patch
  0195-rtl8139-switch-to-use-qemu_receive_.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  0196-e1000-switch-to-use-qemu_receive_pa.patch
  0197-dp8393x-switch-to-use-qemu_receive_.patch
  0198-sungem-switch-to-use-qemu_receive_p.patch
  0199-tx_pkt-switch-to-use-qemu_receive_p.patch
  0200-pcnet-switch-to-use-qemu_receive_pa.patch
  0201-cadence_gem-switch-to-use-qemu_rece.patch
  0202-lan9118-switch-to-use-qemu_receive_.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  0203-slirp-check-pkt_len-before-reading-.patch
- Fix null pointer dereference possibility (DoS) in MegaRAID SAS
  8708EM2 emulation (CVE-2020-13659 bsc#1172386)
  0204-exec-set-map-length-to-zero-when-re.patch
- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  0205-pc-bios-s390-ccw-fix-off-by-one-err.patch
  0206-pc-bios-s390-ccw-break-loop-if-a-nu.patch
- Fix OOB access in iscsi (CVE-2020-11947 bsc#1180523)
  0207-block-iscsi-fix-heap-buffer-overflo.patch
- Fix OOB access in vmxnet3 emulation (CVE-2021-20203 bsc#1181639)
  0208-net-vmxnet3-validate-configuration-.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1619438400">- Add conditionally applied patch: due to single sourcing patch
  queue, it is applied for the SLE12-SP5 release, not SLE15-SP1
  0209-revert-s390x-fix-build-for-without-.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  0210-Drop-bogus-IPv6-messages.patch</changelog>
</package>
<package pkgid="2c018a246f328bc28e63d11175784a55724b26ae6beafa9151ae192b7e9f3321" name="qemu-x86" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="d0d05af227f6a5391a1f96219007e2fe441ceed2a65cb7b08166b239df57b00c" name="qemu-x86" arch="i586">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="9e5b0f932173b6113c50a395f566f431cb8018e8364c3aea3839ef3229f3ce4a" name="qemu-x86" arch="ppc64le">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="37eff8f7ca7e5b0856af140a67c6862f00b4cd5a888bbc46174c28a00bebd5ea" name="qemu-x86" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="58dcc37d02b4810f050b6ec7908d9bae7ae3410a0f4e2b6ac6785ed2f870c248" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="11.19.2"/>
  <changelog author="brogers@suse.com" date="1615291200">- Added a few more usability improvements for our git packaging
  workflow</changelog>
  <changelog author="brogers@suse.com" date="1617192000">- Fix OOB access in sm501 device emulation (CVE-2020-12829, bsc#1172385)
  sm501-Clean-up-local-variables-in-sm501_.patch
  sm501-Convert-printf-abort-to-qemu_log_m.patch
  sm501-Replace-hand-written-implementatio.patch
  sm501-Shorten-long-variable-names-in-sm5.patch
  sm501-Use-BIT-x-macro-to-shorten-constan.patch
- Fix use-after-free in usb xhci packet handling (CVE-2020-25723,
  bsc#1178934)
  hw-xhci-check-return-value-of-usb_packet.patch
- Fix use-after-free in usb ehci packet handling (CVE-2020-25084,
  bsc#1176673)
  hw-ehci-check-return-value-of-usb_packet.patch
- Fix infinite loop (DoS) in usb hcd-ohci emulation
  (CVE-2020-25625, bsc#1176684)
  hw-usb-hcd-ohci-check-for-processed-TD-b.patch
- Fix OOB access in usb hcd-ohci emulation (CVE-2020-25624,
  bsc#1176682)
  hw-usb-hcd-ohci-check-len-and-frame_numb.patch
- Fix guest triggerable assert in shared network
  handling code (CVE-2020-27617, bsc#1178174)
  net-remove-an-assert-call-in-eth_get_gso.patch
- Fix infinite loop (DoS) in e1000e device emulation
  (CVE-2020-28916, bsc#1179468)
  hw-net-e1000e-advance-desc_offset-in-cas.patch
- Fix OOB access in atapi emulation (CVE-2020-29443, bsc#1181108)
  ide-atapi-assert-that-the-buffer-pointer.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Fix null pointer deref. (DoS) in mmio ops (CVE-2020-15469,
  bsc#1173612)
  hw-pci-host-add-pci-intack-write-method.patch
  imx7-ccm-add-digprog-mmio-write-method.patch
  nvram-add-nrf51_soc-flash-read-method.patch
  pci-host-designware-add-pcie-msi-read-me.patch
  prep-add-ppc-parity-write-method.patch
  spapr_pci-add-spapr-msi-read-method.patch
  tz-ppc-add-dummy-read-write-methods.patch
  vfio-add-quirk-device-write-method.patch
- Fix infinite loop (DoS) in e1000 device emulation
  (CVE-2021-20257, bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix OOB access in ati-vga emulation (CVE-2020-27616, bsc#1178400)
  ati-check-x-y-display-parameter-values.patch
- Fix OOB access in SLIRP ARP/NCSI packet processing
  (CVE-2020-29129, bsc#1179466, CVE-2020-29130, bsc#1179467)
  slirp-check-pkt_len-before-reading-proto.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)
- Add split-provides through forsplits/13 to cover updates of
  SLE15-SP2 to SLE15-SP3, and openSUSE equivalents (boo#1184064)</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- v6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618574400">- Fix a case of PIIX southbridge state data not being migrated.
  This change requires the equivalent change present in the target
  qemu of a live migration (patch is also queued for the SLE-15-SP3
  qemu)
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch</changelog>
  <changelog author="brogers@suse.com" date="1618920000">- Fix issue where s390 guest fails to find zipl boot menu index
  (bsc#1183979)
  pc-bios-s390-ccw-break-loop-if-a-null-bl.patch
  pc-bios-s390-ccw-fix-off-by-one-error.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1619697600">- Implement jsc#SLE-17785
  Host CPU microcode revision will be visible inside VMs (if
  the proper CPU-model is used):
  target-i386-add-a-ucode-rev-property.patch
  target-i386-check-for-availability-of-MS.patch
  target-i386-enable-monitor-and-ucode-rev.patch
  target-i386-fix-TCG-UCODE_REV-access.patch
  target-i386-kvm-initialize-microcode-rev.patch</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-20257, bsc#1182846,
  CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="jose.ziviani@suse.com" date="1620388800">- Fix out-of-bounds read information disclosure in icmp6_send_echoreply
  (CVE-2020-10756, bsc#1172380)
  Drop-bogus-IPv6-messages.patch</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
  <changelog author="jose.ziviani@suse.com" date="1621944000">- Fix out-of-bounds access issue while doing multi block SDMA
  (CVE-2020-25085, bsc#1176681)
  hw-sd-sdhci-Fix-DMA-Transfer-Block-Size-.patch</changelog>
</package>
<package pkgid="ccb5d65a3f39dcb9ef98da25f9fa8f014bd0ba38837fba0f91e3471221e91afd" name="qemu-x86" arch="aarch64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3c768cf4a1412e563d429843571c124c5a5a6ee41321929653fc5dcec5ed1de1" name="qemu-x86" arch="i586">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="3b132ff053a0675f13464639a814361901a93b872dbc3968ab2e48d33d5867e2" name="qemu-x86" arch="ppc64le">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="c20d0ec7923b2d889d338655ae1fbd45a46267e969e66efbaf97da78a9392769" name="qemu-x86" arch="s390x">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="00c316b7a3d2ee1495d969e1958a4e4c816a0efd41b46025270eaaf2f2aa7398" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="5.2.0" rel="17.1"/>
  <changelog author="brogers@suse.com" date="1615809600">- Fix incorrect guest data in s390x PCI passthrough (bsc#1183372)
  s390x-pci-restore-missing-Query-PCI-Func.patch</changelog>
  <changelog author="brogers@suse.com" date="1615896000">- Fix DoS in e1000 emulated device (CVE-2021-20257 bsc#1182577)
  e1000-fail-early-for-evil-descriptor.patch</changelog>
  <changelog author="brogers@suse.com" date="1615982400">- Fix s390x "mediated device is in use" error condition
  (bsc#1183634)
  update-linux-headers-Include-const.h.patch
  Update-linux-headers-to-5.11-rc2.patch
  vfio-ccw-Connect-the-device-request-noti.patch</changelog>
  <changelog author="brogers@suse.com" date="1616500800">- Fix OOB access in sdhci interface (CVE-2020-17380, bsc#1175144,
  CVE-2020-25085, bsc#1176681, CVE-2021-3409, bsc#1182282)
  hw-sd-sd-Actually-perform-the-erase-oper.patch
  hw-sd-sd-Fix-build-error-when-DEBUG_SD-i.patch
  hw-sd-sdhci-Correctly-set-the-controller.patch
  hw-sd-sdhci-Don-t-transfer-any-data-when.patch
  hw-sd-sdhci-Don-t-write-to-SDHC_SYSAD-re.patch
  hw-sd-sdhci-Limit-block-size-only-when-S.patch
  hw-sd-sdhci-Reset-the-data-pointer-of-s-.patch
  hw-sd-sd-Move-the-sd_block_-read-write-a.patch
  hw-sd-sd-Skip-write-protect-groups-check.patch
- Fix potential privilege escalation in virtiofsd tool
  (CVE-2021-20263, bsc#1183373)
  tools-virtiofsd-Replace-the-word-whiteli.patch
  viriofsd-Add-support-for-FUSE_HANDLE_KIL.patch
  virtiofsd-extract-lo_do_open-from-lo_ope.patch
  virtiofsd-optionally-return-inode-pointe.patch
  virtiofsd-prevent-opening-of-special-fil.patch
  virtiofs-drop-remapped-security.capabili.patch
  virtiofsd-Save-error-code-early-at-the-f.patch
- Fix OOB access (stack overflow) in rtl8139 NIC emulation
  (CVE-2021-3416, bsc#1182968)
  net-introduce-qemu_receive_packet.patch
  rtl8139-switch-to-use-qemu_receive_packe.patch
- Fix OOB access (stack overflow) in other NIC emulations
  (CVE-2021-3416)
  cadence_gem-switch-to-use-qemu_receive_p.patch
  dp8393x-switch-to-use-qemu_receive_packe.patch
  e1000-switch-to-use-qemu_receive_packet-.patch
  lan9118-switch-to-use-qemu_receive_packe.patch
  msf2-mac-switch-to-use-qemu_receive_pack.patch
  pcnet-switch-to-use-qemu_receive_packet-.patch
  sungem-switch-to-use-qemu_receive_packet.patch
  tx_pkt-switch-to-use-qemu_receive_packet.patch
- Fix heap overflow in MSIx emulation (CVE-2020-27821, bsc#1179686)
  memory-clamp-cached-translation-in-case-.patch
- Include upstream patches designated as stable material and
  reviewed for applicability to include here
  hw-arm-virt-Disable-pl011-clock-migratio.patch
  xen-block-Fix-removal-of-backend-instanc.patch
- Fix package scripts to not use hard coded paths for temporary
  working directories and log files (bsc#1182425)</changelog>
  <changelog author="brogers@suse.com" date="1617105600">- Switch method of splitting off hw-s390x-virtio-gpu-ccw.so as a
  module to what was accepted upstream (bsc#1181103)
  * Patches dropped:
  hw-s390x-modularize-virtio-gpu-ccw.patch
  * Patches added:
  s390x-add-have_virtio_ccw.patch
  s390x-modularize-virtio-gpu-ccw.patch
  s390x-move-S390_ADAPTER_SUPPRESSIBLE.patch</changelog>
  <changelog author="brogers@suse.com" date="1618315200">- Include upstream patches designated as stable material and
  reviewed for applicability to include here. NOTE that the
  PIIX4 patch has migration implications: the change will also be
  applied to the SLE-15-SP2 qemu, and a live migration from that
  version to this SLE-15-SP3 qemu would require this patch to be
  applied for a successful migration if PIIX4 southbridge is used
  in the machine emulation (x86 i440fx)
  block-rbd-fix-memory-leak-in-qemu_rbd_co.patch
  block-rbd-Fix-memory-leak-in-qemu_rbd_co.patch
  cpu-core-Fix-help-of-CPU-core-device-typ.patch
  hw-arm-virt-acpi-build-Fix-GSIV-values-o.patch
  hw-block-fdc-Fix-fallback-property-on-sy.patch
  hw-isa-Kconfig-Add-missing-dependency-VI.patch
  hw-isa-piix4-Migrate-Reset-Control-Regis.patch
  hw-virtio-pci-Added-AER-capability.patch
  hw-virtio-pci-Added-counter-for-pcie-cap.patch
  s390x-css-report-errors-from-ccw_dstream.patch
  target-xtensa-fix-meson.build-rule-for-x.patch
  util-fix-use-after-free-in-module_load_o.patch
  virtio-pci-compat-page-aligned-ATS.patch</changelog>
  <changelog author="brogers@suse.com" date="1618488000">- 6.0.0 qemu is about to be released. Add comments to the in-
  package support documents (supported.&lt;arch&gt;.txt) about the new
  deprecations as of that release as an early head's up for qemu
  users. These deprecations include these command-line options:
  - M option: kernel-irqchip=off
  - chardev tty
  - chardev paraport
  - enable-fips
  - writeconfig
  - spice password=string</changelog>
  <changelog author="brogers@suse.com" date="1618833600">- Include upstream patch designated as stable material and reviewed
  for applicability to include here
  mptsas-Remove-unused-MPTSASState-pending.patch
- Clarify in support documents that cpu-add was removed in this
  release from both the human monitor protocol (HMP) and QMP
  interfaces</changelog>
  <changelog author="brogers@suse.com" date="1620302400">- For the record, these issues are fixed in this package already.
  Most are alternate references to previously mentioned issues:
  (CVE-2019-15890, bsc#1149813, CVE-2020-8608, bsc#1163019,
  CVE-2020-14364, bsc#1175534, CVE-2020-25707, bsc#1178683,
  CVE-2020-25723, bsc#1178935, CVE-2020-29130, bsc#1179477,
  CVE-2020-29129, bsc#1179484, CVE-2021-3419, bsc#1182975)</changelog>
  <changelog author="acho@suse.com" date="1621857600">- QEMU BIOS fails to read stage2 loader (on s390x)(bsc#1186290)
  * Patches added:
  pc-bios-s390-ccw-don-t-try-to-read-the-n.patch</changelog>
</package>
<package pkgid="f7700f9a3f9c67c0de3b7f173dbe69de6ac80df62e088983a66598774a767673" name="rados-objclass-devel" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="9326671d9b6e09311e25f20088ceb4c85f723b7d7758ce7d22f1030b949944f1" name="rados-objclass-devel" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1d36aa158d1043dc30e793234b75abef7eedbc19acfba085d606cb778244dd4d" name="rados-objclass-devel" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="8b87518e7f84d821386bd1d429425e9e466109c30a1e549cbb7c6045a86b71b4" name="rados-objclass-devel" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="dd708f9676a724ca47b6150ef9fd957eecdd15708fa299a4663dd12aae904489" name="rados-objclass-devel" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="59a1cccb26db14ed998b69377b461585517d622e345397c8e40f878375c6ae03" name="rados-objclass-devel" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="389717a70369c567737ccd9151d8661372236b217999131c712f08c74da3b82f" name="rados-objclass-devel" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0a6b792757f2ff72c943afec13068c5d7bd017a4c8af266e949e4a5942b0c460" name="rados-objclass-devel" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="09a1f96ccbf7480820a8c843eb05afbfbd146a5a9b6d83cf338b9079f7616b44" name="radvd" arch="aarch64">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="b11851a4183ae9367fc7e2bf1612afa073d09b3f06b5cd2bb1801acaa874f2f6" name="radvd" arch="i586">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="7fa6e7d76eb14d62197f4b629a6e4751d98030206ae5733ea278266a7cfc751a" name="radvd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="68a344cd5a522a93312e5af730258f675cdbff41dd914e43042d08bbba4245b2" name="radvd" arch="s390x">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="9c98931650854ff14ddfff63d9654df1e58b5c4ba5e9be7d459aa19d6193c096" name="radvd" arch="src">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="5e0cb657f2d0f215a5bce228d1280f51a308bb8af1241ec4a37e6fef77732f10" name="radvd" arch="x86_64">
  <version epoch="0" ver="2.17" rel="5.5.1"/>
  <changelog author="sfalken@opensuse.org" date="1406721600">- Update to version 2.2
  minor fixes:
    Netlink: set setup_iface fix for down interface coming up
    split send_ra into smaller function
    orgainize struct Interface with nested structures
    time: Use clock_gettime and monotonic clock
    add disable_ipv6_autoconfig function so an interface radvd
    is using won't autoconfig itself using its own advert
    improved netlink message processing to *only* reinit an
    interface that changed.
  build fixes:
    Revert bison locations in order to support byacc
    Amend DIST_EXTRA with the make check files
    Add command line option parsing to the check unit test application
    Add make check target based on the check unit testing framework
    Add check in configure.ac for clock_gettime
    Makefile.am: Fix out of tree builds
  disable struct-overflow warning
    Add compiler attributes to type check format strings</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.10
  * Reverted random delay work because it broke detecting new
    interfaces in a timely manor.
- Update radvd-configure.patch
- Do not provide both sysvinit/systemd init files; it's redundant
- Add a backward compatibility link for systemd</changelog>
  <changelog author="mpluskal@suse.com" date="1429358400">- Update to 2.11
  * added --without-check option to configure
- Cleanup spec-file with spec-cleaner
- Add keyring for gpg signature</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- As radvd does not build on older releases removing conditions and
  radvd.init
- Use /var/run instead of /run
- Depend on shadow for useradd</changelog>
  <changelog author="dmueller@suse.com" date="1506427200">- update to 2.17:
  * Fix STDERR_SYSLOG log level bug.
  * Always close stdout and stderr when daemonizing.
  * Implement RFC 7772 Section 5.1.1, 5.1.2, defaulted to on. &lt;Robin H. Johnson&gt;
  * Fixed ExecReload in systemd service file &lt;Harald Albrecht&gt;
  * Merged ARPHRD_6LOWPAN netlink query from &lt;Alexander Aring&gt;
  * Add systemd service file &lt;Craig Andrews&gt;
  * Fixed bug in new vs old address list comparison when
    responding to netlink messages.
  * Fix netlink bug where RADVD reacts to RTM_NEWADDR
    messages when there weren't actually any new addresses
    to be found.  Those RTM_NEWADDR messages were only
  * process.c: fixup ugly overflow check
    radvd.conf.5.man: minor fixup to 'client' option
    radvd.conf.5.man: update abro usage
    gram.y: deprecate abro prefix length
    device-linux.c: IEEE 802.15.4 musl libc fix
    send.c: seconds/miliseconds comparison fix
    send.c: preferred lifetime RFC 4862, 5.5.3 fix
    defaults.h: remaining lifetime RFC 4862 fix
    radvdump: show routes with prefixlen &gt; 64
- run tmpfiles_create in post to ensure creation of rundir
- depend on daemon group to be created before adding user
- fix rundir group permission</changelog>
  <changelog author="dmueller@suse.com" date="1506427201">- only do group prereq on new style distro</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Clear assumptions from description.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jbohac@suse.com" date="1620993600">- replace /var/run with /run in /usr/lib/tmpfiles.d/radvd.conf
  (bsc#1185066)</changelog>
</package>
<package pkgid="967f16c284110b7b75ed909a5e9ffcef7ede87c57894f3a71af24203bc792dc9" name="rbd-fuse" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="0a7d75fc2da8d18a0ccbcd880ae9397ac02ecc1f34a238c1bb47eff92d14929c" name="rbd-fuse" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="5376e645197d7ef58cde43bee5d43b8a8e82062aba33d4460ac7d954ce0f19ec" name="rbd-fuse" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f1bdfc9d32a073e0118af9d13a0d2b10b01985292a3ee4adc8bdda6d1725038e" name="rbd-fuse" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="09bd8b442fb03228d1d6b37972d462932b4eb55f7d9d9c4b5946b20d42d975c8" name="rbd-fuse" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="72a5fe21e759830047df44bfcefcfb136b50eb54ed664609691d80c0457d46a7" name="rbd-fuse" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1d40b85320647b8a3c45e503ebd6591f99aa20232117f4fd5fb06bcdee4603fd" name="rbd-fuse" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b6ce439be524a20e9796a90300b9983ba6ac326258f6dfc8a5ad8a739877b62" name="rbd-fuse" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="7ada2b75d3faaac1515aa4267bab902601eb6cdfbb17e522d47a7bd2bdb09e42" name="rbd-mirror" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="82a3ce5b2814ad94e32c85715b235344994f738b015cb3c6a470afd181eb336b" name="rbd-mirror" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="980543fd1b2ce58817e5c256231d985b791b1144b12229200bc2251723215b8e" name="rbd-mirror" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="ad4858c067c8438e6c9c7065d74e12b709e0a77227b418c7089836fa1cfa524c" name="rbd-mirror" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fe500fe94b8af92f7d62d60fcfbba13828533d3e9b4bba73f35c15841d21639f" name="rbd-mirror" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="1b8e0acc25966d77db3f06e90f17f5e6f47874fe4baf6276e39c6de28c980b49" name="rbd-mirror" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6789126ce1190ede5c60afa1ba7b03e2aba4ac59eb56fac3b3194f988ee52d7d" name="rbd-mirror" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f68dfc70448ade316fbdec19ea965794427f227c330643ac976d27e56af48c93" name="rbd-mirror" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="16478ead9361a534179abe8a72d68c95e39c5babf0c53557f3ac0e3dd4c42ced" name="rbd-nbd" arch="aarch64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="f2343b8847229b3d33c604f8d6e25269edae5f5561af0d754e12c6c79d848bd4" name="rbd-nbd" arch="ppc64le">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="2c5d4f63c8ede11bd2445d2a189edde8e360cff5dd29f3663cd8bd2c5f72f5ed" name="rbd-nbd" arch="s390x">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="35289f3e9f9c4579d6215667408d20a9a700e9f0af7739ceacd4c3d22189ac56" name="rbd-nbd" arch="x86_64">
  <version epoch="0" ver="14.2.21.403+g69ab6ea274d" rel="3.63.1"/>
  <changelog author="ncutler@suse.com" date="1605182400">- Update to 14.2.13-447-g4d9ac2b00a:
  + rebase on top of upstream nautilus branch, SHA1 04747f7b3800889f24311e0ef15e0531a2cc4d8d
  * rbd: rbd-nbd: don't ignore namespace when unmapping by image spec
  * rbd: librbd: ignore -ENOENT error when disabling object-map
  * rgw: radosgw-admin should paginate internally when listing bucket
  * rgw: fix expiration header returned even if there is only one tag in the
    object the same as the rule
  * rgw: fix S3 API KeyCount incorrect return
  * osdc/ObjectCacher: overwrite might cause stray read request callbacks
  * mgr/dashboard: redirect to original URL after successful login
  * mgr/dashboard: Strange iSCSI discovery auth behavior
  * mgr/prometheus: add pool compression stats
  * bluestore: BlockDevice.cc: use pending_aios instead of iovec size as ios num
  * bluestore: test/objectstore/store_test: kill ExcessiveFragmentation test case
  * bluestore: Support flock retry
  * bluestore: attach csum for compressed blobs
  * mgr: fix race between module load and notify
  * mon: set session_timeout when adding to session_map</changelog>
  <changelog author="ncutler@suse.com" date="1605268800">- Update to 14.2.13-450-g65ea1b614d:
  + Fix CVE-2020-25660 (bsc#1177843)
  * mon/MonClient: bring back CEPHX_V2 authorizer challenges
  * msg/async/ProtocolV1: resurrect "implement cephx_*require_version options"
  * msg/async/ProtocolV1: resurrect "include MGR as service when applying cephx settings"</changelog>
  <changelog author="ncutler@suse.com" date="1607342400">- Update to 14.2.15-400-gee47c9760b:
  + rebase on top of upstream nautilus branch, SHA1 afdd217ae5fb1ed3f60e16bd62357ca58cc650e5
    Upstream 14.2.15 release
    see https://ceph.io/releases/v14-2-15-nautilus-released/
  * (bsc#1179139) os/bluestore: fix "end reached" check in collection_list_legacy
    Upstream 14.2.14 release
    see https://ceph.io/releases/v14-2-14-nautilus-released/
  + (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608292800">- Update to 14.2.16-402-g7d47dbaf4d:
  + rebase on top of upstream 14.2.16 release
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation
    possible via ceph_volume_client Python interface
  + (bsc#1180118) bluestore: provide a different name for fallback allocator</changelog>
  <changelog author="ncutler@suse.com" date="1615809600">- Update to 14.2.17-398-ge4ac8c76b3:
  + rebase on top of upstream 14.2.17 release
    (see https://ceph.io/releases/v14-2-17-nautilus-released/ for more information)
  * (bsc#1178905) - (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1179997) - (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1145463) mgr/dashboard: prometheus alerting: add some leeway for package drops and errors
  * (bsc#1174466) mon: have 'mon stat' output json as well
  * (bsc#1177200) rpm: ceph-mgr-dashboard recommends python3-saml on SUSE
  * (bsc#1178235) mgr/dashboard: Display a warning message in Dashboard when debug mode is enabled
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1180118) bluestore: provide a different name for fallback allocator
  * (bsc#1181378) test/run-cli-tests: use cram from github
  + (bsc#1183487) mgr/dashboard: fix "Python2 Cookie module import fails on Python3"
  + Dropped downstream patches:
  * common: make ms_bind_msgr2 default to 'false' (bsc#1180594)
  * Revert: "rgw_file: introduce fast S3 Unix stats (immutable)" (feature has
    baked upstream for several releases already)</changelog>
  <changelog author="ncutler@suse.com" date="1617710400">- Update to 14.2.19-398-gcc56198fca:
  + rebase on top of upstream 14.2.19 release
  * https://ceph.io/releases/v14-2-19-nautilus-released/
    (fixes a regression introduced in 14.2.17)
  * https://ceph.io/releases/v14-2-18-nautilus-released/</changelog>
  <changelog author="ncutler@suse.com" date="1617710401">- Update to 14.2.19-401-gadd8adc54d:
  + fix ceph-test build breakage
  * cmake: only link against necessary libs
  * cmake: SKIP_RPATH if RPATH is not necessary
  * cmake: set empty RPATH for some test executables</changelog>
  <changelog author="ncutler@suse.com" date="1618315200">- _constraints: raise s390x disk constraint to 42G after seeing a build fail
  with "write error: No space left on device"</changelog>
  <changelog author="ncutler@suse.com" date="1618920000">- Update to 14.2.20-402-g6aa76c6815:
  + rebase on top of Ceph 14.2.20 release
  * https://ceph.io/releases/v14-2-20-nautilus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + mgr: add mon metadata using type of "mon"</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 14.2.21-403-g69ab6ea274d:
  + rebase on top of Ceph v14.2.21 tag
    https://ceph.io/releases/v14-2-21-nautilus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="4203e56591d589dd1a8c24c3b86946c44f48aeea67559fc85bd57e7ff0b2f47f" name="rbd-nbd" arch="aarch64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="b42821e065e0c0ff30ce5ec6f7b6e0a6bda5f30d06aa8f35ff4620a08d065b9b" name="rbd-nbd" arch="ppc64le">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="fce0199271ed2e729505d04af7266dc7ef8a38d5b8c7b85593a57c6b6597d2db" name="rbd-nbd" arch="s390x">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="e0770738b9fff9b57c6bce3be1b4a9819b995427188fac1cb268be3e21816fc7" name="rbd-nbd" arch="x86_64">
  <version epoch="0" ver="15.2.12.83+g528da226523" rel="3.25.1"/>
  <changelog author="ncutler@suse.com" date="1606392000">- Update to 15.2.6-684-gd472d0011a:
  + Rebase on tip of upstream "octopus" branch, SHA1 ad83229f58142c7c9e23b931df437dfdbc9a9f68
  * upstream Octopus v15.2.6 release, see https://ceph.io/releases/v15-2-6-octopus-released/
  + qa/task/cephadm: run cephadm only on bootstrap_remote</changelog>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
</package>
<package pkgid="6b96e3f663a1fb4a69ec756e2a7fd52b1e0272422264ef139420197ca073822d" name="readline-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="24dd84e889c11ca24d2a56fbf92bed8759500c14600cf30a578450907000015c" name="readline-devel-64bit" arch="aarch64_ilp32">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="aa879a18d2c37105b505025b7f61c38484b6efc1662003e2c798c38aaf5708bd" name="readline-devel" arch="aarch64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="0463f24fde8a4b80c8072e2e83c90b1867f36e0f074d4f21efc18c443c4d6a33" name="readline-devel" arch="i586">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="c93d4ceadacc93480937570c9cf478d01b27bc1b5ec30b0cecb04beadf84e1b4" name="readline-devel" arch="ppc64le">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="ff7799a6286e3bc1ae8e5a00c13cddc909b9c49acc19942095ca5a792874143d" name="readline-devel" arch="s390x">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="176b38e211818b09b6fb5893fa6b9ed92940dbb62223680148c7f612ea18da7e" name="readline-devel" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="bd7691dd56daf2ebee606030e392eb3314504883891708efebe95e19d13237db" name="readline-devel-static" arch="aarch64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="216ec57ba2a1e0cd1d4fee4d8ca48613ed54ec8e322d7947e34c7f769fc287f1" name="readline-devel-static" arch="i586">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="f30562f31054b0b43296de639bbad18c74b96415359216a6d0f15945328cee6a" name="readline-devel-static" arch="ppc64le">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="615d15d9aebe1989ba2c916b4847f0956d68a69ebd6c394ae2771b9ee1c54197" name="readline-devel-static" arch="s390x">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="66546f81aa909bd00b3d5a9b1bbefb36acc67771d657d396d1c24e5881690a45" name="readline-devel-static" arch="x86_64">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="faad93425104774072a31b2bca3450bac762af34804c8f19ff05f2ded0b80b7d" name="readline-doc" arch="noarch">
  <version epoch="0" ver="7.0" rel="19.3.1"/>
  <changelog author="werner@suse.de" date="1524052800">- Add patch bash-4.4-wait-sigint-handler.patch to fix bug bsc#1086247
  that is repeating self inserting trap due external command in the
  trap.</changelog>
  <changelog author="avindra@opensuse.org" date="1527940800">- Add patch 20, 21, 22 and 23 to bash-4.4-patches.tar.bz2
  * 20: In circumstances involving long-running scripts that create
    and reap many processes, it is possible for the hash table bash
    uses to store exit statuses from asynchronous processes to
    develop loops. This patch fixes the loop causes and adds code
    to detect any future loops.
  * 21: A SIGINT received inside a SIGINT trap handler can possibly
    cause the shell to loop.
  * 22: There are cases where a failing readline command (e.g.,
    delete-char at the end of a line) can cause a multi-character
    key sequence to `back up' and attempt to re-read some of the
    characters in the sequence.
  * 23: When sourcing a file from an interactive shell, setting the
    SIGINT handler to the default and typing ^C will cause the
    shell to exit.
- remove bash-4.4-wait-sigint-handler.patch (upstreamed)</changelog>
  <changelog author="werner@suse.de" date="1528113600">- In patch bash-4.4.dif avoid setgroups(2) but use initgroups(3) (boo#1095670)</changelog>
  <changelog author="werner@suse.de" date="1528891200">- Add patch readline-7.0-screen.patch to be able to parse settings
  in inputrc for all screen TERM variables starting with "screen."
  to fix boo#1095661</changelog>
  <changelog author="bwiedemann@suse.com" date="1530964800">- Add bash-memmove.patch to make bash.html build reproducible (boo#1100488)</changelog>
  <changelog author="werner@suse.de" date="1538136000">- Rework patch readline-7.0-screen.patch</changelog>
  <changelog author="werner@suse.de" date="1559131200">- Add patch bash-4.4-bgpoverflow.patch which is a backport from bash
  5.0 to perform better with large numbers of sub processes (bsc#1133773)</changelog>
  <changelog author="werner@suse.de" date="1565956800">- Rework patch readline-7.0-screen.patch again for bug boo#1143055
  * Map all "screen(-xxx)?.yyy(-zzz)?" to "screen" as well as
    map "konsole(-xxx)?" and "gnome(-xxx)?" to "xterm"</changelog>
  <changelog author="werner@suse.de" date="1600257600">- Move /bin/bash to /usr/bin/bash and provide old location as
  symbolic link of new location (jsc#SLE-15652)
- Remove minimal sh build option as not used</changelog>
  <changelog author="werner@suse.de" date="1620129600">- Add patch bsc1183064.patch
  * Fix bug bsc#1183064: Segfault from reading a history file not
    starting with # with HISTTIMEFORMAT set and history_multiline_entries
    nonzero and with the history cleared and read on the same input line.</changelog>
</package>
<package pkgid="440b2555e3e07c5fc1d857a22e9455b482db23a1b6497a3dd4e6d83230cc650a" name="redis" arch="aarch64">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="0d81c519f2959b1a2aae01dce7ecf1a76ca664c109bafa8458b8b0c9e503646e" name="redis" arch="i586">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="70a100ed7703dc2e78d36a673c36f2686c50b91b881b670b59e444c1493cf3fe" name="redis" arch="ppc64le">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="07f98cf0df057d601e17a4b544efef1ed14a51886ce42d85a52a7a720a66fea6" name="redis" arch="s390x">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="7810191ccdd4a512135723735401a0fe9fd4c5cc8ed3df6be92aa70b8599bbcb" name="redis" arch="src">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="a06bdfa1575a38e1bb3445ab17065a89d3d3bf01b6c6254a85dd25a36c186f67" name="redis" arch="x86_64">
  <version epoch="0" ver="6.0.13" rel="1.10.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591790400">- redis 6.0.5:
  * Fix handling of speical chars in ACL LOAD
  * Make Redis Cluster more robust about operation errors that may
    lead to two clusters to mix together
  * Revert the sendfile() implementation of RDB transfer
  * Fix TLS certificate loading for chained certificates
  * Fix AOF rewirting of KEEPTTL SET option
  * Fix MULTI/EXEC behavior during -BUSY script errors</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1595851200">- redis 6.0.6:
  * Fix crash when enabling CLIENT TRACKING with prefix
  * EXEC always fails with EXECABORT and multi-state is cleared
  * RESTORE ABSTTL won't store expired keys into the db
  * redis-cli better handling of non-pritable key names
  * TLS: Ignore client cert when tls-auth-clients off
  * Tracking: fix invalidation message on flush
  * Notify systemd on Sentinel startup
  * Fix crash on a misuse of STRALGO
  * Few fixes in module API
  * Fix a few rare leaks (STRALGO error misuse, Sentinel)
  * Fix a possible invalid access in defrag of scripts
  * Add LPOS command to search in a list
  * Use user+pass for MIGRATE in redis-cli and redis-benchmark in
    cluster mode
  * redis-cli support TLS for --pipe, --rdb and --replica options
  * TLS: Session caching configuration support</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599825600">- redis 6.0.8 (jsc#PM-1615, jsc#PM-1622, jsc#PM-1681, jsc#ECO-2417, jsc#ECO-2867, jsc#PM-1547, jsc#CAPS-56, jsc#SLE-11578, jsc#SLE-12821):
  * bug fixes when using with Sentinel
  * bug fixes when using CONFIG REWRITE
  * Remove THP warning when set to madvise
  * Allow EXEC with read commands on readonly replica in cluster
  * Add masters/replicas options to redis-cli --cluster call command
- includes changes from 6.0.7:
  * CONFIG SET could hung the client when arrives during RDB/ROF
    loading
  * LPOS command when RANK is greater than matches responded with
    broken protocol
  * Add oom-score-adj configuration option to control Linux OOM
    killer
  * Show IO threads statistics and status in INFO output
  * Add optional tls verification mode (see tls-auth-clients)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603800000">- redis 6.0.9:
  * potential heap overflow when using a heap allocator other
    than jemalloc or glibc's malloc. Does not affect the openSUSE
    package - boo#1178205
  * Memory reporting of clients argv
  * Add redis-cli control on raw format line delimiter
  * Add redis-cli support for rediss:// -u prefix
  * WATCH no longer ignores keys which have expired for MULTI/EXEC
  * Correct OBJECT ENCODING response for stream type
  * Allow blocked XREAD on a cluster replica
  * TLS: Do not require CA config if not used
  * multiple bug fixes
  * Additions to modules API</changelog>
  <changelog author="michael@stroeder.com" date="1610452800">- HTTPS download link for source
- redis 6.0.10:
  Command behavior changes:
  * SWAPDB invalidates WATCHed keys (#8239)
  * SORT command behaves differently when used on a writable replica (#8283)
  * EXISTS should not alter LRU (#8016)
    In Redis 5.0 and 6.0 it would have touched the LRU/LFU of the key.
  * OBJECT should not reveal logically expired keys (#8016)
    Will now behave the same TYPE or any other non-DEBUG command.
  * GEORADIUS[BYMEMBER] can fail with -OOM if Redis is over the memory limit (#8107)
  Other behavior changes:
  * Sentinel: Fix missing updates to the config file after SENTINEL SET command (#8229)
  * CONFIG REWRITE is atomic and safer, but requires write access to the config file's folder (#7824, #8051)
    This change was already present in 6.0.9, but was missing from the release notes.
  Bug fixes with compatibility implications (bugs introduced in Redis 6.0):
  * Fix RDB CRC64 checksum on big-endian systems (#8270)
    If you're using big-endian please consider the compatibility implications with
    RESTORE, replication and persistence.
  * Fix wrong order of key/value in Lua's map response (#8266)
    If your scripts use redis.setresp() or return a map (new in Redis 6.0), please
    consider the implications.
  Bug fixes:
  * Fix an issue where a forked process deletes the parent's pidfile (#8231)
  * Fix crashes when enabling io-threads-do-reads (#8230)
  * Fix a crash in redis-cli after executing cluster backup (#8267)
  * Handle output buffer limits for module blocked clients (#8141)
    Could result in a module sending reply to a blocked client to go beyond the limit.
  * Fix setproctitle related crashes. (#8150, #8088)
    Caused various crashes on startup, mainly on Apple M1 chips or under instrumentation.
  * Backup/restore cluster mode keys to slots map for repl-diskless-load=swapdb (#8108)
    In cluster mode with repl-diskless-load, when loading failed, slot map wouldn't
    have been restored.
  * Fix oom-score-adj-values range, and bug when used in config file (#8046)
    Enabling setting this in the config file in a line after enabling it, would
    have been buggy.
  * Reset average ttl when empty databases (#8106)
    Just causing misleading metric in INFO
  * Disable rehash when Redis has child process (#8007)
    This could have caused excessive CoW during BGSAVE, replication or AOFRW.
  * Further improved ACL algorithm for picking categories (#7966)
    Output of ACL GETUSER is now more similar to the one provided by ACL SETUSER.
  * Fix bug with module GIL being released prematurely (#8061)
    Could in theory (and rarely) cause multi-threaded modules to corrupt memory.
  * Reduce effect of client tracking causing feedback loop in key eviction (#8100)
  * Fix cluster access to unaligned memory (SIGBUS on old ARM) (#7958)
  * Fix saving of strings larger than 2GB into RDB files (#8306)
  Additional improvements:
  * Avoid wasteful transient memory allocation in certain cases (#8286, #5954)
  Platform / toolchain support related improvements:
  * Fix crash log registers output on ARM. (#8020)
  * Add a check for an ARM64 Linux kernel bug (#8224)
    Due to the potential severity of this issue, Redis will print log warning on startup.
  * Raspberry build fix. (#8095)
  New configuration options:
  * oom-score-adj-values config can now take absolute values (besides relative ones) (#8046)
  Module related fixes:
  * Moved RMAPI_FUNC_SUPPORTED so that it's usable (#8037)
  * Improve timer accuracy (#7987)
  * Allow '\0' inside of result of RM_CreateStringPrintf (#6260)</changelog>
  <changelog author="jzerebecki@suse.com" date="1613131200">- Enable TLS support and add BuildRequires libopenssl-devel (bsc#1181830)
- Make tests run by adding BuildRequires tcl and procps</changelog>
  <changelog author="jzerebecki@suse.com" date="1614168000">- Switch systemd type of the sentinel service from notify to simple. This can
  be reverted when updating to 6.2 which fixes
  https://github.com/redis/redis/issues/7284 .</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614168001">- redis 6.0.11:
  * CVE-2021-21309: Avoid 32-bit overflows when proto-max-bulk-len
    is set high (boo#1182657)
  * Fix handling of threaded IO and CLIENT PAUSE (failover), could
    lead to data loss or a crash
  * Fix the selection of a random element from large hash tables
  * Fix broken protocol in client tracking tracking-redir-broken message
  * XINFO able to access expired keys on a replica
  * Fix broken protocol in redis-benchmark when used with -a or
  - -dbnum
  * Avoid assertions (on older kernels) when testing arm64 CoW bug
  * CONFIG REWRITE should honor umask settings
  * Fix firstkey,lastkey,step in COMMAND command for some commands
  * RM_ZsetRem: Delete key if empty, the bug could leave empty
    zset keys</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1614686400">- redis 6.0.12:
  * Fix compilation error on non-glibc systems if jemalloc is not
    used</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- redis 6.0.13
  * CVE-2021-29477: Integer overflow in STRALGO LCS command (boo#1185729)
  * CVE-2021-29478: Integer overflow in COPY command for large intsets (boo#1185730)
  * Cluster: Skip unnecessary check which may prevent failure detection
  * Fix performance regression in BRPOP on Redis 6.0
  * Fix edge-case when a module client is unblocked</changelog>
</package>
<package pkgid="a3fe68689ac1d1870056cc77c7edc8cfe0f99192f4f2bdc7a3ec695fccc8979b" name="reiserfs-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="18.50.2"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="830e1f843ebbe82789c9223c5aca145d1ee4e7261753822f1c1c75e5ca0ebca8" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="bfe34eec6a47a885ba05927ebc4fbb19d3167c7b5beb3fd176d58afe0d77c45e" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="6c6287549f288d391ab4481b68c07786c64a7301f9ec53a6c4d9df7a75a584f3" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="42c1215b9ff9fc6dc45fe84b48472bc077c1de04e7a17b1beed422e04699f2b7" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.89.2"/>
  <changelog author="msuchanek@suse.de" date="1618574400">- Refresh ppc L1D flush patch metadata.
- commit 9db13af</changelog>
  <changelog author="msuchanek@suse.de" date="1618574401">- blacklist.conf: Add b6b79dd53082 powerpc/64s: Fix allnoconfig build
  since uaccess flush
- commit e9d5937</changelog>
  <changelog author="glin@suse.com" date="1618920000">- bpf: Tighten speculative pointer arithmetic mask (bsc#1184942
  CVE-2021-29155).
- bpf: Move sanitize_val_alu out of op switch (bsc#1184942
  CVE-2021-29155).
- bpf: Refactor and streamline bounds check into helper
  (bsc#1184942 CVE-2021-29155).
- bpf: Improve verifier error messages for users (bsc#1184942
  CVE-2021-29155).
- bpf: Rework ptr_limit into alu_limit and add common error path
  (bsc#1184942 CVE-2021-29155).
- bpf: Ensure off_reg has no mixed signed bounds for all types
  (bsc#1184942 CVE-2021-29155).
- bpf: Move off_reg into sanitize_ptr_alu (bsc#1184942
  CVE-2021-29155).
- commit c3fe286</changelog>
  <changelog author="jslaby@suse.cz" date="1619006400">- rpm/check-for-config-changes: add AS_HAS_* to ignores
  arch/arm64/Kconfig defines a lot of these. So far our current compilers
  seem to support them all. But it can quickly change with SLE later.
- commit a4d8194</changelog>
  <changelog author="tiwai@suse.de" date="1619092800">- Revert "rpm/kernel-binary.spec.in: Fix dependency of kernel-*-devel package (bsc#1184514)"
  This turned out to be a bad idea: the kernel-$flavor-devel package
  must be usable without kernel-$flavor, e.g. at the build of a KMP.
  And this change brought superfluous installation of kernel-preempt
  when a system had kernel-syms (bsc#1185113).
- commit d771304</changelog>
  <changelog author="msuchanek@suse.de" date="1619092801">- rpm/kernel-obs-build.spec.in: Include essiv with dm-crypt (boo#1183063).
  Previously essiv was part of dm-crypt but now it is separate.
  Include the module in kernel-obs-build when available.
  Fixes: 7cf5b9e26d87 ("rpm/kernel-obs-build.spec.in: add dm-crypt for building with cryptsetup")
- commit fe15b78</changelog>
  <changelog author="martin.wilck@suse.com" date="1619179200">- rpm/macros.kernel-source: fix KMP failure in %install (bsc#1185244)
- commit 52805ed</changelog>
  <changelog author="bp@suse.de" date="1619438400">- netfilter: x_tables: Use correct memory barriers (bsc#1184208
  CVE-2021-29650).
- commit 719c6a8</changelog>
  <changelog author="jroedel@suse.de" date="1620043200">- KVM: Add proper lockdep assertion in I/O bus unregister
  (CVE-2020-36312 bsc#1184509).
- KVM: Stop looking for coalesced MMIO zones if the bus is
  destroyed (CVE-2020-36312 bsc#1184509).
- KVM: Destroy I/O bus devices on unregister failure _after_
  sync'ing SRCU (CVE-2020-36312 bsc#1184509).
- commit bc1f707</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- Update
  patches.suse/net-fix-race-condition-in-__inet_lookup_established.patch
  (bsc#1151794 bsc#1180624).
- handle also the opposite type of race condition
- commit 783d87d</changelog>
</package>
<package pkgid="3017b39f81e7e94310c44607e979365c385602aec7fcf5d408743ae52627c682" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="caa30905d391c1f3bfa904584f61726ede8457be1d6892d5a2b2ec1087c27e82" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="b7fb84048b17033201a49585f3db3670cc6d7a299d59125cdfd544e87ca11a2d" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="4409976f398daff99cbc205344a6aaec87b940c8e9a3740949e25a964188fdda" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="197.92.1"/>
  <changelog author="ohering@suse.de" date="1621252800">- video: hyperv_fb: Add ratelimit on error message (bsc#1185725).
- Drivers: hv: vmbus: Increase wait time for VMbus unload
  (bsc#1185725).
- Drivers: hv: vmbus: Initialize unload_event statically
  (bsc#1185725).
- commit 3a35d96</changelog>
  <changelog author="tiwai@suse.de" date="1621252801">- Bluetooth: verify AMP hci_chan before amp_destroy
  (CVE-2021-33034 bsc#1186111).
- commit daddd4e</changelog>
  <changelog author="tiwai@suse.de" date="1621252802">- kABI workaround for hci_chan amp field addition (CVE-2021-33034
  bsc#1186111).
- commit 53b1091</changelog>
  <changelog author="msuchanek@suse.de" date="1621598400">- Refresh ibmvfc patches to upstream version.
- commit f0f2d59</changelog>
  <changelog author="msuchanek@suse.de" date="1622116800">- Refresh ibmvfc patch metadata, move to sorted section.
- commit effe5ef</changelog>
  <changelog author="glin@suse.com" date="1622203200">- bpf: Fix mask direction swap upon off reg sign change
  (bsc#1186484,CVE-2021-33200).
- bpf: Wrap aux data inside bpf_sanitize_info container
  (bsc#1186484,CVE-2021-33200).
- commit 3ce8728</changelog>
  <changelog author="aabdallah@suse.de" date="1622203201">- netfilter: conntrack: avoid misleading 'invalid' in log message
  (bsc#1183947 bsc#1185950).
- commit 1c49817</changelog>
  <changelog author="aabdallah@suse.de" date="1622203202">- netfilter: conntrack: tcp: only close if RST matches exact
  sequence (bsc#1183947 bsc#1185950).
- commit 95f7e6e</changelog>
  <changelog author="aabdallah@suse.de" date="1622203203">- netfilter: conntrack: improve RST handling when tuple is re-used
  (bsc#1183947 bsc#1185950).
- commit f464560</changelog>
  <changelog author="aabdallah@suse.de" date="1622203204">- netfilter: conntrack: add new sysctl to disable RST check
  (bsc#1183947 bsc#1185950).
- commit 34df908</changelog>
</package>
<package pkgid="2751136489058d5be77f9fa92253e7b1012229bb665afdb24418135a72e58ce8" name="reiserfs-kmp-default" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="7ad5662ebdbb77083436e886ad5ff47445197d419cc671c98c2346386ee10d52" name="reiserfs-kmp-default" arch="ppc64le">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="51eaf9344b2aea78e6db50c0ea8a356b2321d7625377a662eb883c67d100ba47" name="reiserfs-kmp-default" arch="s390x">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="f883f0ab21c6d9c83d7dda73c436a6f830bef77b5c64728f634382a3a8774c47" name="reiserfs-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.3"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="9c49b2ae338e4bb4f56773774187c0103aab51fd8c55ebebccc2e1551e9ac493" name="reiserfs-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="0d730fe1412058e1d10f49de3eed1c0a16d81cbc913fd87a535e99c40402114f" name="reiserfs-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="24.67.4"/>
  <changelog author="ykaukab@suse.de" date="1622462400">- arm64: vdso32: make vdso32 install conditional (git-fixes).
- commit de92552</changelog>
  <changelog author="hare@suse.de" date="1622462401">- nvme: fix deadlock in disconnect during scan_work and/or
  ana_work (git-fixes).
- Refresh
  patches.suse/nvme-fabrics-reject-I-O-to-offline-device.patch.
- commit 4805fdc</changelog>
  <changelog author="varad.gautam@suse.com" date="1622462402">- series.conf: cleanup
  update upstream references and resort:
  patches.suse/ipc-mqueue-msg-sem-Avoid-relying-on-a-stack-reference.patch
- commit a8331c9</changelog>
  <changelog author="bp@suse.de" date="1622462403">- x86/cpu: Initialize MSR_TSC_AUX if RDTSCP *or* RDPID is
  supported (bsc#1152489).
- commit 1931741</changelog>
  <changelog author="hare@suse.de" date="1622548800">- block/genhd: use atomic_t for disk_event-&gt;block (bsc#1185497).
- commit 57427b3</changelog>
  <changelog author="oneukum@suse.com" date="1622548801">- nxp-nci: add NXP1002 id (bsc#1185589).
- commit 9d43526</changelog>
  <changelog author="oneukum@suse.com" date="1622548802">- nxp-i2c: restore includes for kABI (bsc#1185589).
- commit 1786af1</changelog>
  <changelog author="msuchanek@suse.de" date="1622548803">- Refresh patches.suse/scsi-ibmvfc-Reinit-target-retries.patch.
  Update patch metadata.
- commit e269098</changelog>
  <changelog author="mkubecek@suse.cz" date="1622548804">- series.conf: cleanup
- move unsortable patch out of sorted section
  patches.suse/nxp-nci-add-NXP1002-id.patch
- commit d0ca1ba</changelog>
  <changelog author="dwagner@suse.de" date="1622548805">- Fix patches.suse/nvme-multipath-reset-bdev-to-ns-head-when-failover.patch (bsc#1186681)
  The backport for bsc#1182999 bsc#1178378 introduced a bug.  It's not
  possible to use bdget_disk() in nvme_failover_req() as this can run in
  IRQ context and bdget_disk() can sleep.
  Luckily, we don't need to set bdev via bio_set_dev() as we can set
  bi_disk directly.
  Refresh:
  - patches.suse/nvme-multipath-retry-commands-for-dying-queues.patch
- commit f0fe006</changelog>
</package>
<package pkgid="b1e64b0ae4f74bdb4b459635f1f79b20680677690de043f5e9666f8a36de5ecd" name="reiserfs-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="c751911ab230af3ac272fb6792245948c96b257e61db5e9b0c08022b55558b74" name="reiserfs-kmp-rt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="1a4b0a2efa022976b74644dc3ce64e00abf151e33a1dec6066c035896488bccd" name="reiserfs-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.10.1"/>
  <changelog author="msuchanek@suse.de" date="1620043200">- ibmvnic: queue reset work in system_long_wq (bsc#1152457
  ltc#174432 git-fixes).
- ibmvnic: improve failover sysfs entry (bsc#1043990 ltc#155681
  git-fixes).
- ibmvnic: print adapter state as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: print reset reason as a string (bsc#1152457 ltc#174432
  git-fixes).
- ibmvnic: clean up the remaining debugfs data structures
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in open function
  (bsc#1065729).
- ibmvnic: remove duplicate napi_schedule call in do_reset
  function (bsc#1065729).
- ibmvnic: avoid calling napi_disable() twice (bsc#1065729).
- commit 5d92f24</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043201">- series.conf: cleanup
- update upstream references and resort
  patches.suse/powerpc-mm-Add-cond_resched-while-removing-hpte-mapp.patch
  patches.suse/powerpc-papr_scm-Fix-build-error-due-to-wrong-printf.patch
  patches.suse/powerpc-papr_scm-Implement-support-for-H_SCM_FLUSH-h.patch
  patches.suse/powerpc-pseries-Add-shutdown-to-vio_driver-and-vio_b.patch
  patches.suse/scsi-lpfc-Change-wording-of-invalid-pci-reset-log-me.patch
  patches.suse/scsi-lpfc-Correct-function-header-comments-related-t.patch
  patches.suse/scsi-lpfc-Fix-ADISC-handling-that-never-frees-nodes.patch
  patches.suse/scsi-lpfc-Fix-FLOGI-failure-due-to-accessing-a-freed.patch
  patches.suse/scsi-lpfc-Fix-PLOGI-ACC-to-be-transmit-after-REG_LOG.patch
  patches.suse/scsi-lpfc-Fix-crash-caused-by-switch-reboot.patch
  patches.suse/scsi-lpfc-Fix-dropped-FLOGI-during-pt2pt-discovery-r.patch
  patches.suse/scsi-lpfc-Fix-incorrect-dbde-assignment-when-buildin.patch
  patches.suse/scsi-lpfc-Fix-lpfc_els_retry-possible-null-pointer-d.patch
  patches.suse/scsi-lpfc-Fix-nodeinfo-debugfs-output.patch
  patches.suse/scsi-lpfc-Fix-null-pointer-dereference-in-lpfc_prep_.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-connection-does-not-recover-afte.patch
  patches.suse/scsi-lpfc-Fix-pt2pt-state-transition-causing-rmmod-h.patch
  patches.suse/scsi-lpfc-Fix-reftag-generation-sizing-errors.patch
  patches.suse/scsi-lpfc-Fix-stale-node-accesses-on-stale-RRQ-reque.patch
  patches.suse/scsi-lpfc-Fix-status-returned-in-lpfc_els_retry-erro.patch
  patches.suse/scsi-lpfc-Fix-unnecessary-null-check-in-lpfc_release.patch
  patches.suse/scsi-lpfc-Fix-use-after-free-in-lpfc_els_free_iocb.patch
  patches.suse/scsi-lpfc-Fix-vport-indices-in-lpfc_find_vport_by_vp.patch
  patches.suse/scsi-lpfc-Reduce-LOG_TRACE_EVENT-logging-for-vports.patch
  patches.suse/scsi-lpfc-Update-copyrights-for-12.8.0.7-and-12.8.0..patch
  patches.suse/scsi-lpfc-Update-lpfc-version-to-12.8.0.8.patch
  patches.suse/scsi-qla2xxx-Reserve-extra-IRQ-vectors.patch
  patches.suse/selftests-powerpc-Fix-L1D-flushing-tests-for-Power10.patch
- commit e03aa0a</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043202">- fix patch metadata
- fix Patch-mainline:
  patches.suse/x86-platform-uv-set-section-block-size-for-hubless-architectures.patch
- commit 5cf9a28</changelog>
  <changelog author="mkubecek@suse.cz" date="1620043203">- series.conf: cleanup
- move into "almost mainline" section
  patches.suse/rtc-fsl-ftm-alarm-add-MODULE_TABLE.patch
- commit 75e25e9</changelog>
  <changelog author="fdmanana@suse.com" date="1620043204">- btrfs: fix race between swap file activation and snapshot
  creation (bsc#1185587).
- btrfs: fix race between writes to swap files and scrub
  (bsc#1185586).
- commit 517921a</changelog>
  <changelog author="msuchanek@suse.de" date="1620043205">- KVM: PPC: Book3S HV P9: Restore host CTRL SPR after guest exit
  (bsc#1156395).
- KVM: PPC: Make the VMX instruction emulation routines static
  (bsc#1156395).
- commit 66099c4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043206">- powerpc/perf: Fix PMU constraint check for EBB events
  (bsc#1065729).
- powerpc/64s: Fix pte update for kernel memory on radix
  (bsc#1055117 git-fixes).
- powerpc/asm-offsets: GPR14 is not needed either (bsc#1065729).
- powerpc/prom: Mark identical_pvr_fixup as __init (bsc#1065729).
- powerpc/fadump: Mark fadump_calculate_reserve_size as __init
  (bsc#1065729).
- commit e08fbf4</changelog>
  <changelog author="msuchanek@suse.de" date="1620043207">- powerpc/eeh: Fix EEH handling for hugepages in ioremap space
  (bsc#1156395).
- powerpc/time: Enable sched clock for irqtime (bsc#1156395).
- commit 5ee4c93</changelog>
  <changelog author="msuchanek@suse.de" date="1620129600">- blacklist.conf: Add ppc kuap/uaccess fixes not applicable to SP2
- commit 4b4ca8e</changelog>
  <changelog author="tiwai@suse.de" date="1620129601">- rtc: ds1307: Fix wday settings for rx8130 (git-fixes).
- mmc: sdhci-of-dwcmshc: fix rpmb access (git-fixes).
- commit d21fbb6</changelog>
</package>
<package pkgid="3d31c48da2773d0933c7daaa0dea46ffba7989fa6eda11a096d08eff05e99b1c" name="reiserfs-kmp-rt_debug" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="8.7.1"/>
  <changelog author="denis.kirjanov@suse.com" date="1618315200">- net: atheros: switch from 'pci_' to 'dma_' API (git-fixes).
- commit 9d0c126</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315201">- atl1c: fix error return code in atl1c_probe() (git-fixes).
- commit 138f514</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315202">- atl1e: fix error return code in atl1e_probe() (git-fixes).
- commit 9030b22</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315203">- net: pasemi: fix error return code in pasemi_mac_open() (git-fixes).
- commit 9f74d4a</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1618315204">- enetc: Fix reporting of h/w packet counters (git-fixes).
- commit 2b6231d</changelog>
  <changelog author="msuchanek@suse.de" date="1618315205">- scsi: ibmvfc: Fix invalid state machine BUG_ON() (bsc#1184647
  ltc#191231).
- commit 069588f</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1618315206">- i40e: Fix sparse error: 'vsi-&gt;netdev' could be null
  (jsc#SLE-8025).
- i40e: Fix parameters in aq_get_phy_register() (jsc#SLE-8025).
- net/mlx5: Fix PPLM register mapping (jsc#SLE-8464).
- net: hns3: Remove the left over redundant check &amp; assignment
  (bsc#1154353).
- ice: remove DCBNL_DEVRESET bit from PF state (jsc#SLE-7926).
- commit 1626bf4</changelog>
  <changelog author="bp@suse.de" date="1618315207">- x86: Introduce TS_COMPAT_RESTART to fix get_nr_restart_syscall()
  (bsc#1152489).
- commit 6cf26f2</changelog>
  <changelog author="lhenriques@suse.de" date="1618315208">- Update patches.suse/fuse-fix-live-lock-in-fuse_iget.patch
  (bsc#1184211 CVE-2021-28950).
  Updated patch metadata to include CVE number.
- commit 610fdaf</changelog>
  <changelog author="mkubecek@suse.cz" date="1618315209">- update patch metadata
- update upstream references and move out of sorted section:
  patches.suse/scsi-ibmvfc-Fix-invalid-state-machine-BUG_ON.patch
- commit f170d23</changelog>
</package>
<package pkgid="37388af67347ef87e84203976bf97ea8e345c15459321d37e00b6864173bcc64" name="resource-agents" arch="aarch64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="74edee90e7299954920124ced612b2fe6e24236f8ddc1bc9aee4e6cf678fef8d" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="e1378bf15c5bf75b43d8c854183639b132265ebf64d6926fe70d961f0fae5312" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="02ee55ff88d7a16ee06e19725dfe8d0767839fa2de3f69122ceb718acf4eb170" name="resource-agents" arch="s390x">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="a665f0afd33bfe5cca8aebf1285a6d19a6eba2d74536d8a3cd565d590af4a0a3" name="resource-agents" arch="src">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="ea62f478c922c66f3046a661b7ef5865b8582c4480ef30fbe608f952921843c6" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.3.0184.6ee15eb2" rel="4.48.1"/>
  <changelog author="varkoly@suse.com" date="1587038400">- Use safe tmp files. Use the variable ${HA_RSCTMP} of the resource
  agents instead of /tmp. ${HA_RSCTMP} points to a safe directory
  in /var/run or /run. This patch fix following issues:
  bsc#1146690 bsc#1146691 bsc#1146692 bsc#1146766 bsc#1146776
  bsc#1146784 bsc#1146785 bsc#1146787
- ocfmon user created with "OCFMON" as default password
  If no password is set the user will not be created.
  bsc#1021689 bsc#1146687
- Included following upstream patches:
  0001-make-secure-tmp-files.patch
  0001-increase-the-security-of-monitor-user-in-oracle.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588766400">- Disable cache discovery for "gcp-vpc-move-route" resource agent
  (bsc#1169852)
- Can not manually call the check operation for a resource:
  (bsc#1136928)
- Add upstream patches:
  gcp-vpc-move-disable-google-api-cache-discovery.patch
  galera-fix-value-used-for-connecting-with-the-empty-password.patch
  eliminated-logging.basicConfig.patch</changelog>
  <changelog author="varkoly@suse.com" date="1588852800">- LVM-activate RA: should report monitor fail when VG disapear upon
  iscsi disconnected (bsc#1160121)
- Add upstream patch:
  0001-LVM-activate-verify-vg-or-lv-validity.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- lvmlockd can't handle case: locking_type is NULL (bsc#1162978)
- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  0001-lvmlockd-support-lvm2-2.03-removing-lvmetad.patch
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Improve-accuracy-of-metadata-and-lo.patch
  0002-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upostream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
</package>
<package pkgid="861450a174cf8eec7552056a0352fd08bd70875eeb3f37ad023fc6c2842d540d" name="resource-agents" arch="aarch64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="b0d603d9d1b1e25dfe8c840469963d260a507c8651eb7797e3a56dbb7c538e92" name="resource-agents" arch="i586">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="6943c7c4f751563974801463b2aa8657fdef386fdc2de7d0b77ae3a02f38948d" name="resource-agents" arch="ppc64le">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="87da0094ea2b26320ebb2b9e0be5c1e8df21bd56bf2cda82e000863264ffbfee" name="resource-agents" arch="s390x">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="619414a5948363c5a5c24b4c82b679fa41f98ee98829f1850677d536dd54fc65" name="resource-agents" arch="src">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="706dee4511b763c391a3979b3177b6b82962e73f2783554af8c1e4e991e1e80b" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.4.0+git57.70549516" rel="3.23.1"/>
  <changelog author="varkoly@suse.com" date="1582718400">- Update to version 4.4.0+git57.70549516:
  * [lvmlockd] support lvm2-2.03 removing lvmetad
  * oralsnr: allow using the tns_admin directory for different listeners
  * Change 'alredy' to 'already'
  * LVM-activate: add OCF_CHECK_LEVEL to control monitor action
  * redis: validate_all: fixes file status tests
  * rabbitmq-cluster: ensure we delete nodename if stop action fails
  * IPsrcaddr: remove hardcoded device when using destination parameter
  * Remove standby.signal when promote with restart
  * IPsrcaddr: fixes to avoid failing during probe
  * LVM-activate: verify vg or lv validity
  * [podman] Simplify the code for checking if an image exists
  * Filesystem: add trigger_udev_rules_if_need() for -U, -L, or /dev/xxx device
  * Filesystem: respect udevd need time to create UUID symlinks
  * ldirectord: Support sched-flags
  * IPaddr2: ipt_CLUSTERIP "iptables" extension not "nft" backend compatible
  * IPsrcaddr: fixes to replace local rule if using local table, and set src back to primary for device on stop
  * iSCSI logical unit fix (#1435)
  * Clear out the $DIR_EXECUTABLE variable so we catch the situation when we lose the directory with binaries after first sapinstance_init invokation. The second sapinstance_init invocation will not detect it as it will have already preset the $DIR_EXECUTABLE from previous run. This may allow us running actions after second sapinstance_init invocation that would be not run if we knew that we miss the needed binaries.
  * High: pgsql: Support for PostgreSQL 12
  * IPaddr2: add noprefixroute parameter
  * Filesystem: refresh UUID in the start phase
  * azure-lb Set socat to default on SUSE distributions.
  * exportfs: allow multiple exports of same directory
  * Low: MailTo: fix variable expansion
  * iSCSILogicalUnit.in fixes (#1427)
  * Low: exportfs: Fix spelling error
  * Low: mysql-common: fix startup check
  * aliyun-vpc-move-ip: add binary detection
  * Supports both 'go' and 'python' versions of Aliyun CLI
  * build: update ChangeLog for 4.4.0
  * Low: NodeUtilization: Fix checking for Xen commands
  * build: update ChangeLog for 4.4.0-rc1
  * Route: only validate for start and validate-all actions
  * apache: testing to-execute-file for mere presence is not enough
  * LVM-activate: add partial-activation support
  * Add missed requirement
  * Use the function get_release_id to detect the OS. The parameter LOAD_STATUS_MODULE must be quoted.
  * gcp-pd-move: add parameter stackdriver_logging (#1412)
  * aws-vpc-route53: Improvements and fixes (#1409)
  * LVM-activate: move pvscan --cache to validate
  Fixes to bugs bsc#1151833, bsc#1154465 are included in this update.</changelog>
  <changelog author="varkoly@suse.com" date="1582718401">- Request to add "gcp-vpc-move-route" resource agent to SLE12 and SLE15
  (bsc#1161898) Add patch:
  0007-Request-to-add-gcp-vpc-move-route.patch</changelog>
  <changelog author="varkoly@suse.com" date="1592481600">- /usr/lib/ocf/resource.d/heartbeat/clvm has mismatched variable assignment
  (bsc#1172734)
- L3: azure-events resource agent failure causes attr_globalPullState
  to be stuck in "PULLING" state. (bsc#1170270)
- Add upstream patch:
  fix-default-variables-in-clvm-RA.patch
  azure-events-handle-exceptions-in-urlopen.patch</changelog>
  <changelog author="varkoly@suse.com" date="1597838400">- GCP Resource Agents - Support for Multi Alias IP
  (bsc#1175101)
  Add upstream patch:
  0001-gcp-vpc-move-vip-Add-support-for-multiple-alias-IP-r.patch
- OCF version check for pacemaker is incompatible with the SUSE version
  strings [ref:_00D1igLOd._5001iO8Exd:ref] (bsc#1170354)
  Add upstream patch:
  enable-git-hashes-in-versions.patch</changelog>
  <changelog author="varkoly@suse.com" date="1600084800">- Last commit of a galera cluster member is not saved into grastate.dat
  [ref:_00D1igLOd._5001iQlUm4:ref] (bsc#1175435)
  Add upstream patch:
  0001-galera-Fix-automatic-recovery-when-a-cluster-was-not.patch</changelog>
  <changelog author="varkoly@suse.com" date="1606132800">- (bsc#1178977) ocf.py does not handle probe actions
  Add upstream patch:
  0001-fix-problem-with-unset-OCF_RESKEY_CRM_meta_interval-.patch
  0001-SAPInstance-introduce-MINIMAL_PROBE-resource-paramet.patch</changelog>
  <changelog author="varkoly@suse.com" date="1610971200">- (bsc#1179977) L3: anything RA stop operation fails if
  /root/.profile has unexpected content
  Add upstream patch:
    0001-The-anything-RA-getpid-function-can-fail-to-return-t.patch</changelog>
  <changelog author="varkoly@suse.com" date="1618574400">- (bsc#1177796) ethmonitor bloats journal with warnings for VLAN
    devices [ref:_00D1igLOd._5001iTe6jj:ref]
  Add upstream patch:
    0001-ethmonitor-is_interface-RE-matches-vlan-names.patch
- (bsc#1180590) azure-events URLError fixed upstream
  Add upstream patch:
    0001-azure-events-import-URLError-and-encode-postData-whe.patch
- (bsc#1184607) gcp-vpc-move-route resource agent file_cache is
  unavailable when using oauth2client
  Add upstream patch:
    0001-Disable-google-api-cache-discovery.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620043200">- (bsc#1183971) L3: azure-events puts both nodes in standby
  Add upstream patch:
    0001-azure-events-only-decode-when-exec-output-not-of-typ.patch</changelog>
  <changelog author="varkoly@suse.com" date="1620648000">- (bsc#1178680) HA-LVM systemid race condition introduces an error
  "active on 2 nodes"
  Add upstream patch:
    0001-LVM-activate-Disable-VG-autoactivation-in-system_id-.patch</changelog>
</package>
<package pkgid="b9bc2d4f9dbfc057d2878b9dc898c8dc261ad6a71f6b14b8074598939c5d24cc" name="rmt-server" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="ed9181a1c31d95c764e2f86bd26cff9eb748d5d83833eb28c87a6dee41359c87" name="rmt-server" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="6c55f3bbb5db06997fcbc54f233ad8e2f79f09be136ac7f0ac5565613f048b22" name="rmt-server" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="60bd770a4fef73c5217d139d91a6b98de8024be61a3aa80878b942dce84ac12a" name="rmt-server" arch="src">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="88353fe38ad5de7b25a84e7d32c2606c4815cd6824bb06bca1910210034e2b8a" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="b09945185c45d047afaec6cb6de80894c629df4901bc80edbab1442bde09d747" name="rmt-server-config" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="7eb3c9d1497e03b724453f99239b0065f46b2b1f4107496adde669ed6490c516" name="rmt-server-config" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="b394afec6451a2bc03a3ed1458ac9347495b4847cb230a70ebb0c731c7b943a2" name="rmt-server-config" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="bd8bbb73024b0a2ba05d917095b2af9b0ed392942acb3d7b895860218576ce49" name="rmt-server-config" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="1bf5b003b5e29329d5633ce81f497c16395e141cfed20c8031c19ddf6c9bda97" name="rmt-server-pubcloud" arch="aarch64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="2181f41d5b12d8e88e2481130935af5b89a594438c4da7276fb10b2b6cb4a91f" name="rmt-server-pubcloud" arch="ppc64le">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="19c33061f9e25f4aa8e0fedbcc6990c93b21515353d85c128ca359808023e321" name="rmt-server-pubcloud" arch="s390x">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="28448800882e2ee6afce82281db99ee6a92844def9ac1d3ab7813fd9666f82bb" name="rmt-server-pubcloud" arch="x86_64">
  <version epoch="0" ver="2.6.9" rel="3.12.1"/>
  <changelog author="tmuntaner@suse.com" date="1601467200">- Version 2.6.3
- Instead of using an MD5 of URLs for custom repository friendly_ids,
  RMT now builds an ID from the name.</changelog>
  <changelog author="luis.caparroz@suse.com" date="1601640000">- Version 2.6.4
- Add web server settings to /etc/rmt.conf:
  Now it's possible to configure the minimum and maximum threads count as well
  the number of web server workers to be booted through /etc/rmt.conf.</changelog>
  <changelog author="tmuntaner@suse.com" date="1602072000">- Version 2.6.5
- Solved potential bug of SCC repository URLs changing over time. RMT
  now self heals by removing the previous invalid repository and
  creating the correct one.</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613390400">- Version 2.6.6
- Add filter options for product listing and bash completion for new flags</changelog>
  <changelog author="natnael.getahun@suse.com" date="1613649600">- Fix rpath build issues
- Resubmit version 2.6.6</changelog>
  <changelog author="jesus.bv@suse.com" date="1614340800">- Do not raise an exception when mirroring
  if info missing is in alpha or beta stage
  This references bsc#1180018</changelog>
  <changelog author="jmammen@suse.com" date="1615896000">- Include installed modules to the solution tree when doing
  an offline migration. (bsc#1179523)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1615896001">- Version 2.6.7
- Clean out `subscriptions` table only if replacement data is already
  available (bsc#1183615)
- Raise an error when there is an extension activated which has no
  migration successor (like LTSS)</changelog>
  <changelog author="fschnizlein@suse.com" date="1617019200">- Version 2.6.8
- Fixing wrong handling of ids starting with numeric characters (bsc#1182736)</changelog>
  <changelog author="jesus.bv@suse.com" date="1619092800">- Version 2.6.9
- Fix: Don't append slash to custom repository urls
- Add enabled attribute to syncing process
  This fixes wrong marked repositories when syncing
  This references bsc#1184814
- Enable 'Installer-Updates' repositories when
  enabling a product, so they can get used by
  the installer to patch the installation system itself.
  This references bsc#1184814</changelog>
</package>
<package pkgid="13582ca3dd811f75d5c115a957811531edff21d16dcee3b64bda38e8e8fa9eda" name="ruby-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4988b82ea4134469d35d1351fd484c8b322929e094fdb79dc84ad8c146a1b991" name="ruby-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="f9bc58b1fa3af33a9dec04563085fd1a1ead2e97e4848c84dfed360b46fd7769" name="ruby-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="9f713cd6e4166ff13d683613c882a55af120af4530038d0ae48d0e63a1edf005" name="ruby-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="554da3b52d04314f372ae358eb21a0f2e81dadac4e981da59eeb701ab979d261" name="ruby-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="3.45.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="6520ec2e8db73d15eb166d76b073a5ec0cfeb7b648d61d3b5e4c4b7849c0f0e0" name="ruby-solv" arch="aarch64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="b698c29c607e3fb7f74c6a136c2a0421017bd461c99720d7bfe233fc35ce8bcf" name="ruby-solv" arch="i586">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4ad176a31f8fe251cf27a6fe79379ae2a862fc27c44ea4180e3a6312195d69f0" name="ruby-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="c1ba2d234c873112f3541f010b9da9c1b0f9f6c32a3a381d3450eb5a43e91fe0" name="ruby-solv" arch="s390x">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="4910aff577f4b3dadd70fa8e48a7ed7551f5010fdf432b39d525b2fa387688d6" name="ruby-solv" arch="x86_64">
  <version epoch="0" ver="0.7.19" rel="6.1"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
</package>
<package pkgid="57e0244479c3911db3ea2d3f2d041ae2f1985850c011d6f710da62752ccc6c1b" name="ruby2.5-rubygem-actionpack-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="b4fc4455a26e715a12bc02a3cec499464813329b074235a26b0ede267ec3dda4" name="ruby2.5-rubygem-actionpack-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="a5886e412fafa5c2a7c1f529ad11c0d4923697cb638d5b0aae3cb72d757e1414" name="ruby2.5-rubygem-actionpack-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="59274954e578640e7f01e9426a247c769441ebe106e5b9c9089acae4ddcf6f00" name="ruby2.5-rubygem-actionpack-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="e7c45a0f21a81728e5c7f808c8d4e5ecbf51421d6da57a2e939e3eccc83d2cb9" name="ruby2.5-rubygem-actionpack-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="06c9739f8e54291ebfe43bac30c5c131a969c519da5d49b30be1e210a71d07ec" name="ruby2.5-rubygem-actionpack-doc-5_1" arch="aarch64">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="b77e108c3d32fe8f7333784b022d13f47ad73b910dcd0fd32f8d01c52f0731d0" name="ruby2.5-rubygem-actionpack-doc-5_1" arch="i586">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="a389b093ef9f2b0d899cacd976a5da7a2ae9ae39abd7880220c16c16049cc4c8" name="ruby2.5-rubygem-actionpack-doc-5_1" arch="ppc64le">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="cdd9ad18942ee0225e0ba426374bea2bd574a8a65f1d1b9bc14b264fc440b868" name="ruby2.5-rubygem-actionpack-doc-5_1" arch="s390x">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="103423b25b4828227cde05159585e3f2db4e99fb1e41c751a62c6642838d90b5" name="ruby2.5-rubygem-actionpack-doc-5_1" arch="x86_64">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="e9c02465cd7660d152fd2372af877c7908789839a57057fed841352fe9541524" name="rubygem-actionpack-5_1" arch="src">
  <version epoch="0" ver="5.1.4" rel="3.9.1"/>
  <changelog author="coolo@suse.com" date="1457438400">- updated to version 4.2.6
  see installed CHANGELOG.md
  [#]# Rails 4.2.6 (March 07, 2016) ##
  * No changes.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to rails 5.0 - see http://weblog.rubyonrails.org/2016/6/30/Rails-5-0-final/</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to version 5.0.0.1
  see installed CHANGELOG.md</changelog>
  <changelog author="cbruckmayer@suse.com" date="1480939200">- Add patch for fixing content type is nil
  Already merged into upstream and will be included in the next rails version 5.0.0.2
  https://github.com/rails/rails/pull/25950</changelog>
  <changelog author="adrian@suse.de" date="1498305600">- update to version 5.1.1</changelog>
  <changelog author="cbruckmayer@suse.com" date="1502280000">- Update to version 5.1.3</changelog>
  <changelog author="enavarro@suse.com" date="1504872000">- Update to version 5.1.4
  see installed CHANGELOG.md</changelog>
  <changelog author="lukas.krause@suse.com" date="1552910400">- Add CVE-2019-5418_and_CVE-2019-5419.patch (CVE-2019-5418,
  CVE-2019-5419, bsc#1129272, bsc#1129271)
  * CVE-2019-5418:
    There is a possible file content disclosure vulnerability in
    Action View. Specially crafted accept headers in combination
    with calls to `render file:` can cause arbitrary files on the
    target server to be rendered, disclosing the file contents.
  * CVE-2019-5419:
    Specially crafted accept headers can cause the Action View
    template location code to consume 100% CPU, causing the server
    unable to process requests. This impacts all Rails applications
    that render views.
- Add series file for better patch handling with quilt</changelog>
  <changelog author="mschnitzer@suse.com" date="1596196800">- CVE-2020-8164: Possible Strong Parameters Bypass in ActionPack.
  There is a strong parameters bypass vector in ActionPack.
  (bsc#1172177)
- Added patch 0002-CVE-2020-8164.patch
- Renamed patch CVE-2019-5418_and_CVE-2019-5419.patch to
  0001-CVE-2019-5418_and_CVE-2019-5419.patch</changelog>
  <changelog author="jtomasiak@suse.com" date="1620648000">- Added patch 0003-CVE-2021-22885.patch (CVE-2021-22885, bsc#1185715)</changelog>
</package>
<package pkgid="ec3ee4436a22716b344ebaa0bdca45cdccae52ed14a42a936baef23227444403" name="runc" arch="aarch64">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="283a4e90949bca03292097dc6bce68320e29a85396024d02e0f4c58fce607ed8" name="runc" arch="i586">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="fb3b9449b0439a5e6f919f5f12cf325b4511b4b69e8e53cf1e71f6dae029fb27" name="runc" arch="ppc64le">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="43a056a6066d6fd254832d4928a9649e090d346fcef6953771269ec55477cc91" name="runc" arch="s390x">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="715e45e677ff8cf32d43f81a5fae3bd2eed6757e96f6653951873289a7c8a22d" name="runc" arch="src">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="d3e72f45471846ff2a8b55a5276f74a179d0237cc07812bc672dc7d91a6f4943" name="runc" arch="x86_64">
  <version epoch="0" ver="1.0.0~rc93" rel="1.14.2"/>
  <changelog author="rhafer@suse.com" date="1584532800">- Added fix for bsc#1149954
  * 0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
    (cherry pick of https://github.com/opencontainers/runc/pull/1807)</changelog>
  <changelog author="rhafer@suse.com" date="1586865600">- Renamed patch:
  0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  to
  bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch</changelog>
  <changelog author="asarai@suse.com" date="1589371200">- Backport https://github.com/opencontainers/runc/pull/2391 to help fix
  bsc#1168481.
  + bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Switch to Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1593691200">- Upgrade to runc v1.0.0~rc91. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc91
  * This release of runc has experimental support for cgroupv2-only systems.
- Remove upstreamed patches:
  - bsc1149954-0001-sd-notify-do-not-hang-when-NOTIFY_SOCKET-is-used-wit.patch
  - bsc1168481-0001-cgroup-devices-major-cleanups-and-minimal-transition.patch</changelog>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
  syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1619697600">- Add fix for CVE-2021-30465. bsc#1185405
  + CVE-2021-30465.patch</changelog>
</package>
<package pkgid="7efd57489520350d5ed98b47d41bed76e7cbd9b52a2f32847d706ffa8ed35491" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="84d47730e8da5cfb0ddfd03f353c9a0d405946ccc9c78837239eaa18264d9de0" name="s390-tools" arch="src">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="944b222d2d0e11fae131d6ae8dfb22ad2831429664e820db46065d6c7bafee5b" name="s390-tools-hmcdrvfs" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="833d62158d738d48e7441f473a4bbc7dac63210e35a370b96468ae7f5146dc46" name="s390-tools-zdsfs" arch="s390x">
  <version epoch="0" ver="2.11.0" rel="9.26.1"/>
  <changelog author="mpost@suse.com" date="1584619200">- Added the following patches for bsc#1166850
  zipl: fix secure boot config handling:
  * s390-tools-sles15sp2-01-zipl-Add-missing-options-to-help-output.patch
  * s390-tools-sles15sp2-02-zipl-allow-stand-alone-secure-option-on-command-l.patch
  * s390-tools-sles15sp2-03-zipl-correct-secure-boot-config-handling.patch
  * s390-tools-sles15sp2-04-zipl-fix-zipl.conf-man-page-example-for-secure-boot.patch
- Modified the spec file so that the kernel used for the SCSI dump
  tool is named zfcpdump-image instead of zfcpdump_part.image. This
  is to match the new version of zipl that expects this new file name.
  (bsc#1166851)</changelog>
  <changelog author="mpost@suse.com" date="1586260800">- Added s390-tools-sles15sp2-01-cpumf-add-new-deflate-counters-for-z15.patch
  (bsc#1167853)
  lscpumf: New z15 CPU-MF counters not available, so add the
  definition for the new deflate counters.
- Updated read_values (bsc#1167815, jsc#SLE-10675)
  * Differentiate between IBM Z and IBM LinuxONE machines
  * Query and print the status of secure boot for the LPAR.</changelog>
  <changelog author="mpost@suse.com" date="1593432000">- Added s390-tools-sles15sp2-vmcp-exit-code.patch (bsc#1173481)
  Change the vmcp exit code and return 'CP command failed' when both
  "CP command failed" and "response buffer is too small" error
  conditions are true.</changelog>
  <changelog author="mpost@suse.com" date="1595505600">- Added s390-tools-sles15sp2-zipl-prevent-endless-loop-during-IPL.patch
  (bsc#1174309) zipl: prevent endless loop during secure IPL
- Added s390-tools-sles15sp2-zipl-check-for-valid-ipl-parmblock-lowcore-pointer.patch
  (bsc#1174310) zipl: check for valid ipl parmblock lowcore pointer
- Added s390-tools-sles15sp2-01-zipl-libc-libc_stop-move-noreturn-to-declaration.patch
    s390-tools-sles15sp2-02-zipl-stage3-correctly-handle-diag308-response-code.patch
  (bsc1174311) zipl: Fix KVM IPL without bootindex
- Updated cputype and read_values to recognize the new z15 models.</changelog>
  <changelog author="mpost@suse.com" date="1600344000">- Added s390-tools-sles15sp2-lscpumf-change-dflt-ccerror-counter-name.patch
  (bsc#1176508)
  lscpumf displays counter number 265 as DFLT_CCERROR. This is wrong
  and differs from the counter name as defined in the Linux kernel
  version 5.8 and later.
- Added the following patches to implement the post-GA feature jsc#ECO-2636
  Log FCP link info for endpoint security (bsc#1175477)
  * s390-tools-sles15sp2-01-zdev-Introduce-read-only-attributes.patch
  * s390-tools-sles15sp2-02-zdev-Handle-special-case-in-if-case.patch
  * s390-tools-sles15sp2-03-zdev-Report-FC-Endpoint-Security-of-zfcp-devices.patch
  * s390-tools-sles15sp2-04-zfcpdbf-print-HBA-FC-Endpoint-Security-trace-records.patch</changelog>
  <changelog author="mpost@suse.com" date="1607515200">- Modified s390-tools-sles15-Allow-multiple-device-arguments.patch
  so that the check for thinly provisioned DASD happens for each
  volume specified, and not just once in the main routine. (bsc#1173163)
- Added s390-tools-sles15sp2-libdasd-Fix-dasd_get_host_access_count.patch
  for bsc#1178548. The library function dasd_get_host_access_count()
  checks for unsuccessful execution of util_sys_get_dev_addr()
  incorrectly. Turn the check around.
- Added the following two patches for bsc#1178549:
  When using zgetdump on a multi-volume device dump, the sysfs
  path to  determine the device node is incomplete.
  * s390-tools-sles15sp2-01-libutil-add-util_file_read_i-util_file_read_ui.patch
  * s390-tools-sles15sp2-02-zgetdump-Fix-device-node-determination-via-sysfs.patch
- Added s390-tools-sles15sp2-lscpumf-Show-raw-event-numbers-correctly.patch
  for bsc#1178550: Output of command lscpumf -c displays the raw
  counter always with a starting rXXX with XXX being a hex number.
- Added s390-tools-sles15sp2-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  for bsc#1178732: zcryptstats: Fix handling of partial results with
  many domains.
- Added s390-tools-sles15sp2-libutil-Compare-proc-entries-to-vfstype.patch
  for github/ibm-s390-tools/s390-tools issue#91: To make sure that
  the mount point of the sysfs is still found when mounted with a
  device keyword specified other than 'sysfs', check for the
  filesystem type instead, which is more specific.
- Added "V=1" to the make command as requested by the openSUSE team.</changelog>
  <changelog author="mpost@suse.com" date="1611576000">- Added the following patches for bsc#1180113:
  util_sys_get_dev_addr() returns the device address for a given
  blockdevice. This does not work for partitions but some tools
  like zipl rely on the ability to get the device address for
  partitions.
  * s390-tools-sles15sp2-01-libutil-add-function-to-get-base-device-for-bloc.patch
  * s390-tools-sles15sp2-02-libutil-determine-base-device-address-in-case-of.patch</changelog>
  <changelog author="mpost@suse.com" date="1615204800">- Added s390-tools-sles15sp2-zipl-fix-4k-scsi-ipl.patch (bsc#1183040)
  IPL is not working when bootloader is installed on a SCSI disk
  with 4k physical blocksize without using a devicemapper target.
- Updated detach_disks.sh to not use predictable temporary file
  names. (bsc#1182777, CVE-2021-25316)
- Updated the mkdump.pl script to make the name of the temporary
  configuration file in /tmp/ unpredictable. (bsc#1182876)
- Modified 59-dasd.rules-wait_for.patch to restore the lines we were
  previously deleting, but changing the scheduler from "deadline"
  to the newly created "mq-deadline" scheduler. (bsc#1176574)</changelog>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183807)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp2-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183807.
- Added s390-tools-sles15sp2-dbginfo-Added-and-removed-commands.patch
  dbginfo.sh: Collect /proc/kallsyms, issue additional commands
  (bsc#1183944)</changelog>
  <changelog author="mpost@suse.com" date="1620388800">- Added the following patches for bsc#1185732:
  * s390-tools-sles15sp2-dasdfmt-Fix-whitespace.patch
    Replace blanks with tab characters to conform to IBM coding standards
  * s390-tools-sles15sp2-dasdfmt-Remove-function-dasdfmt_format.patch
    dasdfmt_format() does nothing but calling process_tracks() with the same
    parameters. Get rid of it, call process_tracks() directly, and avoid
    confusion.
  * s390-tools-sles15sp2-dasdfmt-Make-program-relevant-information-global.patch
    The global program options (and other actually globally used
    information) are currently passed through via function parameter
    whenever this information is needed. However, in reality, this
    information is used almost everywhere across the program.
  * s390-tools-sles15sp2-dasdfmt-Fix-bad-file-descriptor-error-when-running-o.patch
    When calling dasdfmt on device node symlinks like
    /dev/disk/by-id/ccw-0X9300, dasdfmt fails with "dasdfmt: the ioctl to get
    the blocksize of the device failed (Bad file descriptor)"
    In order to fix this without modifying the behaviour of libdasd,
    introduce the two global variables dev_node and dev_path.
  * s390-tools-sles15sp2-dasdfmt-Replace-ERRMSG_EXIT-macro-with-an-error-hand.patch
    The ERRMSG_EXIT macro is a bit clunky in its usage and a change is
    necessary in order to free memory in error cases.
    Create a new function error() that takes only a format string and adds
    all other relevant information by itself.
  * s390-tools-sles15sp2-dasdfmt-Improve-error-message-construction.patch
    In check_track_format() the base error message is the same for all cases
    but has different additional content depending on which mode dasdfmt is
    running.
    Currently the message is compiled by using different outputs. To make it
    a little bit cleaner and for a better error message handling, construct
    the message string completely before passing it to the error() function
    for output.
  * s390-tools-sles15sp2-dasdfmt-Set-prog_name-to-last-component-of-program-n.patch
    In the process of switching to glibc defined error functions it becomes
    apparent that self-defined error functions that do special things are
    not in line with the output of the glibc functions.
    To address this, set the prog_name variable to the last component of the
    program name (stored in argv[0]) and guarantee a uniform error output.
  * s390-tools-sles15sp2-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
    When specifying an incorrect program option, dasdfmt segfaults as the
    format string for the corresponding error message has no parameter.
    Add the missing parameter to fix this.
  * s390-tools-sles15sp2-dasdfmt-Make-error-function-less-error-prone.patch
    Add a proper definition to the dasdfmt header file of the error()
    function that lets the compiler check the format string against the
    provided parameters.
- As a result of the above changes, the following patches needed to be
  modified to fit the new program structure. To avoid confusion, I
  also renamed them as follows:
  * s390-tools-sles15-Allow-multiple-device-arguments.patch
    s390-tools-sles15sp2-Allow-multiple-device-arguments.patch
  * s390-tools-sles15-Format-devices-in-parallel.patch
    s390-tools-sles15sp2-Format-devices-in-parallel.patch
  * s390-tools-sles15-Implement-Y-yast_mode.patch
    s390-tools-sles15sp2-Implement-Y-yast_mode.patch
  * s390-tools-sles15-Implement-f-for-backwards-compability.patch
    s390-tools-sles15sp2-Implement-f-for-backwards-compability.patch
  * dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
    s390-tools-sles15sp2-dasdfmt-retry-BIODASDINFO-if-device-is-busy.patch
- Modified s390-tools-sles15sp2-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)</changelog>
</package>
<package pkgid="d3a1e712c9e87c393c4a5c45b589041900e4bc10a359f296724064edd77c1818" name="salt" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6c21a69def9cf2a47f48387901c1c24e6c359b4792a5a74d33186a71446d8502" name="salt" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="cb3be3213aefb8ec2ab9a393423dd2589d2c5f2352c4d04e129ec3a053c2e759" name="salt" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="2eaec40afe2da21f5d543e21f83fd2da1066f741fc54ad9be34b1631de8d5969" name="salt" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="53b3c2990bbb33a2160f6409e4e928cb5f96834f03a8514fbfd13e9f6094f1ba" name="salt" arch="src">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="110553208c75a6df6740db9d70a3b9f15498c1cbf221dd989f9eb4c958d9c97a" name="salt" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="fe2c9e55bf784f7b9c25eb3951c5e8290caaa4b329ef2f65ae192cc7a3de2e30" name="salt-api" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="938dea0ee2d6e4054274e4c9db15794875e7d21e88c838289eda89fd2290af5d" name="salt-api" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="0521bcef8e1898e1fb4abe46c0fc76b6b211e654db5456d4c1af85779126fb41" name="salt-api" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="951cecd714632064101b8de3bd3f653a71d64176159e02cc77518223176305c1" name="salt-api" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="c53a3262e4924dc9ac76eb8a0e76d1804dffec114f05131807ecf151a4f0392a" name="salt-api" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="f5df4f5b9452dcb4a92977d4143136658c40d10d9d15260d6460896ec2281258" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6615d7b9c02ce8bb1ac78d45f561925d3f5ff924a40cb0f7a39ceabbaee00f73" name="salt-cloud" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="017632be75c95efc300e8e942e04fd544bef2e533fb769544dac41a1f878c99e" name="salt-cloud" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="d3f73aa8253e2c4a88047db474dbee787a59f97d9670c9391cec20298ffc6b5b" name="salt-cloud" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="15c9b4416c2a37f9ce6c24bab47ede14b818047a74f947bef9b65bc5bb34385e" name="salt-cloud" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="de84f9b5b8db3655fceed28f91e1eebc04d06ae44a22a2d57390f2532c741db7" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="de7e04908af3deccde46895cf8237e19f1ffcfa64cbc67885a3e80073dd0e7f2" name="salt-doc" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6085bd0cf9a4754819fb8470f5b869e484a62bdcba27ffcd82fb25e42a050930" name="salt-doc" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="8e064c3fb0a1160a24cc894ec709700c5a8488fa68abdcd8c0afeaa4fa7a206c" name="salt-doc" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="889b04a1a3eaa1a30aff139b0b6ed50bd10cfe74205d172c1e0dcc55133fde37" name="salt-doc" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="d3047b758e41707ea0ec6732788c7f8204c479308def81a73ad18ff05b1313dd" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="1118e671e4a1f45250c53f080a7998fb5347f1c28b12ff2765c020fd2e9ca996" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="15bda135182dfdc88e04ac8b6c2ec9ed70e4b0060cc78ff539c0887d3034ea96" name="salt-master" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="ce48ebb964aa1fce2f4118622f5a188f004381a4552f68612a0deaab87a47c44" name="salt-master" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="b3774a301a6ed4ccfa36a4e6dcff3c652151775c324ab30f1d38a18278e447d5" name="salt-master" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6d0183b5fa0d5e25e73151b4a3acffcb0c10b87ef6887ce1986d45c9c031de3a" name="salt-master" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="c77c773f7e6885f9b7ea16eb2544465b1b3b32e3d6365a8451906de67612731d" name="salt-master" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="604671b56338a40baca2e342c8c041c7c4047c93b2f86c906d38bcfd37772171" name="salt-minion" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="a2f3b9fe191bd2e10154d5157de094caad0a2f8354b4296efcce6ff529e209a7" name="salt-minion" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="d3f59fc232105620f4dcbe95eca0f2fa1c8abfdde71ea4f4038167152daf116f" name="salt-minion" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="cc31700dae1dfa85cbf732cf5123da426ea8bca49d9242565e059ea4ac034d16" name="salt-minion" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="56d1506a97d07cce77a7119bef1916c2d3d56ff25f4fadca6d630e1f6bee18c4" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="34f2bff0ab8e2551623e4aca6ead40d16d1f162e0dc89d64f5b1390e444813be" name="salt-proxy" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="8d7ac48baadf9987c1307b3d4d5079f7b33a55c4d572c8321c45175f060cb76c" name="salt-proxy" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="96bf9d7475e6cb338550ce4e89fa7db9961652f13d178ee9e5091801051a3f1e" name="salt-proxy" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6b7bd84fbff34f20b707c22756eeb3d8199fb768f16b6c1beec55d1ea29ed2a8" name="salt-proxy" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="50e0b3e538f5da7f10ff2db9f8e9d160ae104e2abeafffcfdbaad65ad3dd5f5c" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="18ec7cbfa56cfbe08f78de219def8249a91b782b14d8ae05769ca9e3451045cb" name="salt-ssh" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="2d1c1674455790733b1de6376fbc2032eb9a2a84448ef8bbf4287f6afd6c3edf" name="salt-ssh" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="b46cd856ef8e719fd26081f833c7593c614cd0eb3460e3336386da4a97decbdc" name="salt-ssh" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="0b5a48ef566d674cb00a1110b3366f9db3264a735ef88841157b7cbcbc38091e" name="salt-ssh" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="c63e029fb325b87ebe8fa97bcd7cb029cfd84859e40c61cc5330dd98c31c1b07" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="12b5769d84206bd436ec0e8548ac1146ef79a4e50dcfe15702be4d912e3e82ef" name="salt-standalone-formulas-configuration" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="e4d68fb92305fb75077c268eb7b2f62ab627b5024c7f2fd343434604190470f6" name="salt-standalone-formulas-configuration" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6c6746c6d6a81e53699f1e7ee64d2904571756aca59205aef4b7305485a68787" name="salt-standalone-formulas-configuration" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="ed00cc661460c03151fb782877b66ecd98d1459d3e3965bd4aa69ddddd5bd818" name="salt-standalone-formulas-configuration" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="8a233f74f34842329f7ba38bf0b9b02bc0a723b3418ba065882e53cc275d0633" name="salt-standalone-formulas-configuration" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="dc332bb029a5f5fd78bac8605c2a4a8f1c3b74e9b5b8adae83985e4a2215161c" name="salt-syndic" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="37e1725fe18293e8e092f5b7bcaf0c4a0cd2ae0f67fae20d454dbdb14aee257a" name="salt-syndic" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="20c04ccc150a02c139e369d04001eac9d7173cbdf167b02d3a14dd134ea711e6" name="salt-syndic" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="b281f4a085da5fde60b65a668f7c0588e8c767b78a7b0fe5d856be1f7916a4b9" name="salt-syndic" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="0a96411b5c63f5370920a538f9125d40722cf647359915796072ecc5336a22e9" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="1585dcd5a265c5ae92d5c0946298762090f9fe0b180d708af74162fc9c6df0ef" name="salt-transactional-update" arch="aarch64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="f25a188afc80fe2719ad82c75f8a655c87d4687e6bcd1b3da9c6e0a723a0d096" name="salt-transactional-update" arch="i586">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="f241da248ed1b3a1b3c2b487e29b988d9bc68a03ed9e4d40b80de02abe07b1f9" name="salt-transactional-update" arch="ppc64le">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="a84fc0170ad714bdbdee43bd6b15f4c2eea775c1bacfaff256fb5e0e2b079038" name="salt-transactional-update" arch="s390x">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="9f8c0a5d87bf70538fa7635eed5458f73da02e1dd94e7604db5b5aab50f0c9a1" name="salt-transactional-update" arch="x86_64">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="05590f6e3ffca16c8a62a522949bb59a92b182722b499954e4e3c6f5f2564f78" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="3002.2" rel="8.41.8.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610452800">- Force zyppnotify to prefer Packages.db than Packages if it exists
- Allow vendor change option with zypper
- Add pkg.services_need_restart
- Fix for file.check_perms to work with numeric uid/gid
- Added:
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * add-pkg.services_need_restart-302.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539200">- Revert wrong zypper patch to support vendorchanges flags on pkg.install
- Added:
  * revert-add-patch-support-for-allow-vendor-change-opt.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1610539201">- Remove deprecated warning that breaks minion execution when "server_id_use_crc" opts is missing
- Added:
  * remove-deprecated-warning-that-breaks-miniion-execut.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1613131200">- virt: search for grub.xen path
- Xen spicevmc, DNS SRV records backports:
  Fix virtual network generated DNS XML for SRV records
  Don't add spicevmc channel to xen VMs
- virt UEFI fix: virt.update when efi=True
- Do not crash when unexpected cmd output at listing patches (bsc#1181290)
- Fix behavior for "onlyif/unless" when multiple conditions (bsc#1180818)
- Added:
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * open-suse-3002.2-xen-grub-316.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * virt-uefi-fix-backport-312.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1614600000">- Allow extra_filerefs as sanitized kwargs for SSH client
- Fix regression on cmd.run when passing tuples as cmd (bsc#1182740)
- Fix for multiple for security issues
  (CVE-2020-28243) (CVE-2020-28972) (CVE-2020-35662) (CVE-2021-3148) (CVE-2021-3144)
  (CVE-2021-25281) (CVE-2021-25282) (CVE-2021-25283) (CVE-2021-25284) (CVE-2021-3197)
  (bsc#1181550) (bsc#1181556) (bsc#1181557) (bsc#1181558) (bsc#1181559) (bsc#1181560)
  (bsc#1181561) (bsc#1181562) (bsc#1181563) (bsc#1181564) (bsc#1181565)
- Implementation of suse_ip execution module to prevent issues with network.managed (bsc#1099976)
- Add sleep on exception handling on minion connection attempt to the master (bsc#1174855)
- Allows for the VMware provider to handle CPU and memory hot-add in newer versions of the software. (bsc#1181347)
- Always require python-certifi (used by salt.ext.tornado)
- Bring missing part of async batch implementation back (bsc#1182382) (CVE-2021-25315)
- Always require python3-distro (bsc#1182293)
- Added:
  * async-batch-implementation-fix-320.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * fix-for-some-cves-bsc1181550.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1615377600">- virt.network_update: handle missing ipv4 netmask attribute
- Set distro requirement to oldest supported version in requirements/base.txt
- Do not monkey patch yaml loaders: Prevent breaking Ansible filter modules (bsc#1177474)
- Don't require python3-certifi
- Fix race conditions for corner cases when handling SIGTERM by minion (bsc#1172110)
- Added:
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618315200">- Regression fix of salt-ssh on processing some targets
- Add support for Alibaba Cloud Linux 2 (Aliyun Linux)
- Update target fix for salt-ssh to process targets list (bsc#1179831)
- Add notify beacon for Debian/Ubuntu systems
- Add core grains support for AlmaLinux and Alibaba Could Linux
- Allow vendor change option with zypper
- Added:
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1618920000">- Improvements on "ansiblegate" module (bsc#1185092):
  * New methods: ansible.targets / ansible.discover_playbooks
  * General bugfixes
- Added:
  * improvements-on-ansiblegate-module-354.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1620734400">- Drop support for Python2. Obsoletes "python2-salt" package (jsc#SLE-18033)
- Fix issue parsing errors in ansiblegate state module
- Prevent command injection in the snapper module (bsc#1185281) (CVE-2021-31607)
- transactional_update: detect recursion in the executor
- Add subpackage salt-transactional-update (jsc#SLE-18028)
- Remove duplicate directories
- Added:
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * transactional_update-detect-recursion-in-the-executo.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1622548800">- Check if dpkgnotify is executable (bsc#1186674)
- Added:
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch</changelog>
</package>
<package pkgid="6eea8749f6e54be8226f302ee08515b9705a8def7a58d051515c10663e620f85" name="saphanabootstrap-formula" arch="noarch">
  <version epoch="0" ver="0.7.1+git.1619008686.8600866" rel="3.11.1"/>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1603108800">- Set the native fence mechanism usage for CSP as optional</changelog>
  <changelog author="simranpal.singh@suse.com" date="1605096000">- Add support to extract and install HANA Client sar packages</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606219200">- Add requisite of hana installation to subsequent salt states</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606910400">- Start the saptune daemon service</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.7.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix how the HANA client options are handled. Now, if any of the
  HANA client option variables are set, they will have preference
  over the database option (the platform and extracted options)</changelog>
  <changelog author="xarbulu@suse.com" date="1615550400">- Fix the HANA sidadm usage to transform to lowercase some states
  managing the sudoers file in ha_cluster.sls state file
  (bsc#1185090)</changelog>
  <changelog author="xarbulu@suse.com" date="1616068800">- Version bump 0.7.1
- Implement the load balancer use case for GCP in the cluster resource
  agents template</changelog>
</package>
<package pkgid="e0e0cf6c7174f8ab695ef624e8967101677f8248b6aacb164a7e7295c586e1fe" name="saphanabootstrap-formula" arch="src">
  <version epoch="0" ver="0.7.1+git.1619008686.8600866" rel="3.11.1"/>
  <changelog author="simranpal.singh@suse.com" date="1602417600">- Fix the hana media extraction and installation logics when using exe archives</changelog>
  <changelog author="simranpal.singh@suse.com" date="1602590400">- Version 0.6.2:
  * Update the package version after SUMA form update and extraction logic update
  (jsc#SLE-4047)</changelog>
  <changelog author="xarbulu@suse.com" date="1603108800">- Set the native fence mechanism usage for CSP as optional</changelog>
  <changelog author="simranpal.singh@suse.com" date="1605096000">- Add support to extract and install HANA Client sar packages</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606219200">- Add requisite of hana installation to subsequent salt states</changelog>
  <changelog author="simranpal.singh@suse.com" date="1606910400">- Start the saptune daemon service</changelog>
  <changelog author="xarbulu@suse.com" date="1611057600">- Version bump 0.7.0
  * Change salt-formulas-configuration requirement in SLE12 codestream
  to a recommendation
  (bsc#1177860)</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix how the HANA client options are handled. Now, if any of the
  HANA client option variables are set, they will have preference
  over the database option (the platform and extracted options)</changelog>
  <changelog author="xarbulu@suse.com" date="1615550400">- Fix the HANA sidadm usage to transform to lowercase some states
  managing the sudoers file in ha_cluster.sls state file
  (bsc#1185090)</changelog>
  <changelog author="xarbulu@suse.com" date="1616068800">- Version bump 0.7.1
- Implement the load balancer use case for GCP in the cluster resource
  agents template</changelog>
</package>
<package pkgid="1fd8fd20345291cd9bc871608cec7ab26d98b6ac07a2bc796c24a3f4fcda4d79" name="sapstartsrv-resource-agents" arch="noarch">
  <version epoch="0" ver="0.9.0+git.1619681975.ad20a04" rel="1.9.1"/>
  <changelog author="xarbulu@suse.com" date="1600257600">- Simplified Cluster FS architecture for S/4HANA and NetWeaver
  It controls the instance specific sapstartsrv process which
  provides the API to start, stop and check a SAP instance.
  (jsc#ECO-3341, jsc#SLE-16935, jsc#SLE-17440)
- Include python version to the resource agent</changelog>
  <changelog author="fabian.herschel@suse.com" date="1607083200">- Add sapservices-move script</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix the spec file to follow properly the SLE submission policies</changelog>
  <changelog author="abriel@suse.com" date="1617192000">- prevent sapping.service from running a second time after a
  corosync start/restart
  (bsc#1183969)</changelog>
  <changelog author="abriel@suse.com" date="1619092800">- remove deprecated option "syslog" from the sapping.service and
  sappong.service files.
  (bsc#1185152)</changelog>
</package>
<package pkgid="d639049f6c952a51640b755019edefb625f6e1328247a656d9db6801b4a4a0e3" name="sapstartsrv-resource-agents" arch="src">
  <version epoch="0" ver="0.9.0+git.1619681975.ad20a04" rel="1.9.1"/>
  <changelog author="xarbulu@suse.com" date="1600257600">- Simplified Cluster FS architecture for S/4HANA and NetWeaver
  It controls the instance specific sapstartsrv process which
  provides the API to start, stop and check a SAP instance.
  (jsc#ECO-3341, jsc#SLE-16935, jsc#SLE-17440)
- Include python version to the resource agent</changelog>
  <changelog author="fabian.herschel@suse.com" date="1607083200">- Add sapservices-move script</changelog>
  <changelog author="xarbulu@suse.com" date="1614945600">- Fix the spec file to follow properly the SLE submission policies</changelog>
  <changelog author="abriel@suse.com" date="1617192000">- prevent sapping.service from running a second time after a
  corosync start/restart
  (bsc#1183969)</changelog>
  <changelog author="abriel@suse.com" date="1619092800">- remove deprecated option "syslog" from the sapping.service and
  sappong.service files.
  (bsc#1185152)</changelog>
</package>
<package pkgid="130ab01ed8c79026fa9ec45ed6a90c0b54b84535d639d043c21b5ca40b386a98" name="sapwmp" arch="aarch64">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="a3cd8424315141d4df4a8b3662eb132e6b60aef81d86a79625a56e1363fd5139" name="sapwmp" arch="i586">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="7c2c1a789e070778cff06c041b58a8930cc5cc74c43238f5f10e4cd2caedfcda" name="sapwmp" arch="ppc64le">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="8971ba7aba6b702739244be5e48970b6dace0c0174816f29b18383666a5f6bba" name="sapwmp" arch="s390x">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="372423e838c43774efa0be3669c3d4b00dcd63464d3a679e5e02bf83073eaef0" name="sapwmp" arch="src">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="6bb15b39b5be9f956741e0528c854d6d5729d25abe4efd3f4ebb92e436bb6e30" name="sapwmp" arch="x86_64">
  <version epoch="0" ver="0.1+git.1619087532.40eb1b0" rel="3.6.1"/>
  <changelog author="mkoutny@suse.com" date="1584360000">- Update to version 0.1+git.1584120573.cfcc33f920e9:
  * capture: Print messages into syslog
  * capture: Refactor exit error logging</changelog>
  <changelog author="mkoutny@suse.com" date="1584360001">- Update to version 0.1+git.1584386614.942e6694a1fa:
  * capture: Fix printing PIDs
  * capture: Do not fail with unknown options
  * capture: Add verbose logging
  * capture: Whitespace formatting
  * capture: Log empty capture too</changelog>
  <changelog author="mkoutny@suse.com" date="1584964800">- Update to version 0.1+git.1584983560.8ebbcd5754ae:
  * Add supportconfig module
  * rpm: Unify path delimiters in .spec</changelog>
  <changelog author="mkoutny@suse.com" date="1586347200">- Update to version 0.1+git.1585821196.17801a880194:
  * supportconfig: Change method to list swapped processes</changelog>
  <changelog author="mkoutny@suse.com" date="1589889600">- Switch to master git branch (rename only)
- Update to version 0.1+git.1589905944.e384d0ea1469:</changelog>
  <changelog author="mkoutny@suse.com" date="1591185600">- Update to version 0.1+git.1591186085.937f404f2263:
  * RPM: Rename log to WMP
  * RPM: Install memory logging files
  * supportconfig: Capture some calibration data too
  * Calibration: Add memory measurement
  * RPM: specfile switch to master
  * RPM: Fix sap.slice documentation</changelog>
  <changelog author="mkoutny@suse.com" date="1597838400">- Update to version 0.1+git.1597829321.6124d06cb94f:
  * cgroups: sap.slice has MemoryAccounting=yes (bsc#1175458)
  * supportconfig: Graceful handling of gone PIDs
  * Calibration: Make sure memory controller is enabled
  * RPM: Add better explanation of missing sapsys group</changelog>
  <changelog author="mkoutny@suse.com" date="1599220800">- Update to version 0.1+git.1599229900.269a09c:
  * RPM: Require kernel fix for bsc#1174002
  * calibration: Randomize time of sampling</changelog>
  <changelog author="mkoutny@suse.com" date="1599566400">- Update to version 0.1+git.1599582034.723ec7d:
  * RPM: Update documentation URL
  * supportconfig: Adjust for generic slice name
  * RPM: Migrate configuration from sap.slice to SAP.slice
  * All: Rename sap.slice to SAP.slice
  * RPM: Don't treat sap.slice as service (bsc#1176264)
  * calibration: Row oriented format</changelog>
  <changelog author="nwang@suse.com" date="1619092800">- Update to version 0.1+git.1619087532.40eb1b0:
  * Call sapwmp check in supportconfig.
  * bsc#1184865, remove sapstartsrv from process tree and enable SLE15SP3 wmp-check.
  * Install the wmp-check to /usr/sbin
  * spec: polish spec file based on review comments.
  * Modify the spec file to include script and remove duplicated files.
  * Include a script to check the setup of wmp.
  * capture: Graceful handling of missing PARENT_COMMANDS
  * capture: Apply scope limits only when they are non-zero
  * capture: Parse scope properties from config file</changelog>
</package>
<package pkgid="dbe7d0cd68507cfd6173f1f814ec12ef1c99d963debc104136a5afc40db6b646" name="shim" arch="src">
  <version epoch="0" ver="15.4" rel="3.23.1"/>
  <changelog author="glin@suse.com" date="1594382400">- Use vendor-dbx to block old SUSE/openSUSE signkeys (bsc#1168994)
  + Add dbx-cert.tar.xz which contains the certificates to block
    and a script, generate-vendor-dbx.sh, to generate
    vendor-dbx.bin
  + Add vendor-dbx.bin as the vendor dbx to block unwanted keys
- Drop shim-opensuse-signed.efi
  + We don't need it anymore</changelog>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="850e5d7cbd687b2574a0f9536ba635e62cc37a5ce5e85ee02912c304f684d0d8" name="shim" arch="x86_64">
  <version epoch="0" ver="15.4" rel="3.23.1"/>
  <changelog author="glin@suse.com" date="1594382400">- Use vendor-dbx to block old SUSE/openSUSE signkeys (bsc#1168994)
  + Add dbx-cert.tar.xz which contains the certificates to block
    and a script, generate-vendor-dbx.sh, to generate
    vendor-dbx.bin
  + Add vendor-dbx.bin as the vendor dbx to block unwanted keys
- Drop shim-opensuse-signed.efi
  + We don't need it anymore</changelog>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="f2a6a640a3b6b7a636e5ffda8aa420b9143e98a34c2b8a4bb1c6df1e26ce0703" name="shim" arch="src">
  <version epoch="0" ver="15.4" rel="3.26.1"/>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
  <changelog author="glin@suse.com" date="1622030400">- shim-install: remove the unexpected residual "removable" label
  for Azure (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="b04114881e0495dc9a4250eef2a2466043282fd4ffb1ed34f49c30465e85ac13" name="shim" arch="x86_64">
  <version epoch="0" ver="15.4" rel="3.26.1"/>
  <changelog author="glin@suse.com" date="1595419200">- Update the path to grub-tpm.efi in shim-install (bsc#1174320)</changelog>
  <changelog author="jsegitz@suse.com" date="1596196800">- Updated SUSE signature</changelog>
  <changelog author="glin@suse.com" date="1596715200">- Amend the check of %shim_enforce_ms_signature</changelog>
  <changelog author="glin@suse.com" date="1598270400">- shim-install: install MokManager to \EFI\boot to process the
  pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1602849600">- Include suse-signed shim (bsc#1177315)
- shim-install: Support changing default shim efi binary in
  /usr/etc/default/shim and /etc/default/shim (bsc#1177315)</changelog>
  <changelog author="glin@suse.com" date="1619524800">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"
  + Merged EKU codesign check (bsc#1177315)
- Drop merged patches
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-bsc1092000-fallback-menu.patch
  + shim-always-mirror-mok-variables.patch
  + shim-correct-license-in-headers.patch
  + gcc9-fix-warnings.patch
  + shim-fix-gnu-efi-3.0.11.patch
  + shim-bsc1173411-only-check-efi-var-on-sb.patch
- Drop shim-opensuse-cert-prompt.patch since the openSUSE kernel
  enabled lockdown.</changelog>
  <changelog author="glin@suse.com" date="1619524801">- Also package the debuginfo and debugsource
- Drop COPYRIGHT file since it's already in the shim rpm package</changelog>
  <changelog author="glin@suse.com" date="1620388800">- shim-install: always assume "removable" for Azure to avoid the
  endless reset loop (bsc#1185464)</changelog>
  <changelog author="glin@suse.com" date="1621425600">- shim-install: instead of assuming "removable" for Azure, remove
  fallback.efi from \EFI\Boot and copy grub.efi/cfg to \EFI\Boot
  to make \EFI\Boot bootable and keep the boot option created by
  efibootmgr (bsc#1185464, bsc#1185961)</changelog>
  <changelog author="glin@suse.com" date="1622030400">- shim-install: remove the unexpected residual "removable" label
  for Azure (bsc#1185464, bsc#1185961)</changelog>
</package>
<package pkgid="5243a3533b74feed9eedeb56c33a26c8e114d0fb2c2f85d79475ec945e6e1d14" name="shim" arch="src">
  <version epoch="0" ver="15.4" rel="7.19.1"/>
  <changelog author="jsegitz@suse.com" date="1518091200">- Acquired updated signature from Microsoft (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1521806400">- Add the missing leading backlash to the DEFAULT_LOADER
  (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1523361600">- Add shim-bsc1088585-handle-mok-allocations-better.patch to avoid
  double-freeing after enrolling a key from the disk (bsc#1088585)
  + Also refresh shim-opensuse-cert-prompt.patch due to the change
    in MokManager.c</changelog>
  <changelog author="jsegitz@suse.com" date="1524571200">- Acquired updated signature from Microsoft (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1525953600">- Add shim-bsc1092000-fallback-always-try-first-option.patch to
  avoid being trapped in the infinite reset loop in machines with
  faulty firmware (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1527508800">- Replace shim-bsc1092000-fallback-always-try-first-option.patch
  with shim-bsc1092000-fallback-menu.patch to show a countdown menu
  before reset (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1565956800">- Update shim-install to specify the target for grub2-install and
  change the boot efi file name according to the architecture
  (bsc#1118363, FATE#325971, bsc#1145676)</changelog>
  <changelog author="glin@suse.com" date="1597060800">- Update to the unified shim binary from SLE15-SP1 (bsc#1168994)
  + Version: 15+git47, "Thu Aug  6 09:43:19 UTC 2020"
  + Drop merged patches:
  - shim-only-os-name.patch
  - shim-arch-independent-names.patch
  - shim-httpboot-include-console.h.patch
  - shim-remove-cryptpem.patch
  - shim-httpboot-amend-device-path.patch
  - shim-bsc1088585-handle-mok-allocations-better.patch
  - shim-bsc1092000-fallback-menu.patch
  - shim-change-debug-file-path.patch
  - shim-opensuse-cert-prompt.patch</changelog>
  <changelog author="glin@suse.com" date="1598875200">- Update to the unified shim binary from SLE15-SP1
  + Version: 15+git47-3.8.1, "Mon Aug 24 09:12:18 UTC 2020"
  + shim-install: install MokManager to \EFI\boot to process the
    pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1620129600">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"</changelog>
</package>
<package pkgid="36595206f59242b000ab454eba45072c7ec8949d0ea6f0c581f1f514d5b56f73" name="shim" arch="x86_64">
  <version epoch="0" ver="15.4" rel="7.19.1"/>
  <changelog author="jsegitz@suse.com" date="1518091200">- Acquired updated signature from Microsoft (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1521806400">- Add the missing leading backlash to the DEFAULT_LOADER
  (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1523361600">- Add shim-bsc1088585-handle-mok-allocations-better.patch to avoid
  double-freeing after enrolling a key from the disk (bsc#1088585)
  + Also refresh shim-opensuse-cert-prompt.patch due to the change
    in MokManager.c</changelog>
  <changelog author="jsegitz@suse.com" date="1524571200">- Acquired updated signature from Microsoft (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1525953600">- Add shim-bsc1092000-fallback-always-try-first-option.patch to
  avoid being trapped in the infinite reset loop in machines with
  faulty firmware (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1527508800">- Replace shim-bsc1092000-fallback-always-try-first-option.patch
  with shim-bsc1092000-fallback-menu.patch to show a countdown menu
  before reset (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1565956800">- Update shim-install to specify the target for grub2-install and
  change the boot efi file name according to the architecture
  (bsc#1118363, FATE#325971, bsc#1145676)</changelog>
  <changelog author="glin@suse.com" date="1597060800">- Update to the unified shim binary from SLE15-SP1 (bsc#1168994)
  + Version: 15+git47, "Thu Aug  6 09:43:19 UTC 2020"
  + Drop merged patches:
  - shim-only-os-name.patch
  - shim-arch-independent-names.patch
  - shim-httpboot-include-console.h.patch
  - shim-remove-cryptpem.patch
  - shim-httpboot-amend-device-path.patch
  - shim-bsc1088585-handle-mok-allocations-better.patch
  - shim-bsc1092000-fallback-menu.patch
  - shim-change-debug-file-path.patch
  - shim-opensuse-cert-prompt.patch</changelog>
  <changelog author="glin@suse.com" date="1598875200">- Update to the unified shim binary from SLE15-SP1
  + Version: 15+git47-3.8.1, "Mon Aug 24 09:12:18 UTC 2020"
  + shim-install: install MokManager to \EFI\boot to process the
    pending MOK request (bsc#1175626, bsc#1175656)</changelog>
  <changelog author="glin@suse.com" date="1620129600">- Update to the unified shim binary from SLE15-SP3 for SBAT support
  (bsc#1182057)
  + Version: 15.4, "Thu Apr 22 03:26:48 UTC 2021"</changelog>
</package>
<package pkgid="20d4f1c7a8fa5bac009e18fd1cdb4627f51451b92d891c3b7311223da1fbeaea" name="sle-manager-tools-release" arch="aarch64">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="a7acf16e2215c56bf9ed5e9337c31176378648b2854060fc47056fe10fe19022" name="sle-manager-tools-release" arch="i586">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="fce22cfbea10c52f418d3899d2edc94c6ad4ab68acdc0eef38438aeab508837b" name="sle-manager-tools-release" arch="ppc64le">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="06c8bb9a8f4f95e1f7c06e16a504f5e81a6fa4e49d1208dff33bd36f5732d6c5" name="sle-manager-tools-release" arch="s390x">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="468c5884d53c6ea4ec46bfda8bd16ecc6e1f1d9f878efd7565a4c80b7998b9d5" name="sle-manager-tools-release" arch="src">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="63576dc724ca8c20b284736384884728d11e1b784f1aa0500412542f931628c2" name="sle-manager-tools-release" arch="x86_64">
  <version epoch="0" ver="15" rel="113.8.1"/>
  <changelog author="jgonzalez@suse.com" date="1620734400">- Make the SUSE Manager client tools for SLE15 compatible with openSUSE
  Leap 15 and SLE Micro 5.X (bsc#1182501)</changelog>
</package>
<package pkgid="351ac3bb271d16182f89335f9684165248569d989b0eb8f1c669a391b532678b" name="sle-rt-hw_en" arch="noarch">
  <version epoch="0" ver="15.2" rel="3.6.2"/>
  <changelog author="jcheung@suse.com" date="1473422400">- This document was original created by fate#319435 [DOCU] SLE RT Hardware Testing Guide review</changelog>
  <changelog author="jcheung@suse.com" date="1479988800">- Update the Document to 12 SP2
- Remove the "Extension" wording from the document</changelog>
  <changelog author="ke@suse.de" date="1481716800">- Update text and image files (git: 2d6472a).</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511265600">- Update the document to 12 SP3
  No additions at this point</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="jcheung@suse.com" date="1544097600">- Update the document to 15 SP1 (version 15.1) (bsc#1115921)</changelog>
  <changelog author="jcheung@suse.com" date="1571572800">- Update the document to 15 SP2 (version 15.2) (bsc#1154546)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1601380800">- Update the document to 15 SP2 and to fix some issues with
  wrong SP numbers in text (bsc#933411)
  No real content changes
- Correct and simplify spec file</changelog>
  <changelog author="jcheung@suse.com" date="1619697600">- Update the content of the section about
  Determining Latencies with the Hardware Latency Detector (bsc#1185328)</changelog>
  <changelog author="jcheung@suse.com" date="1620734400">- Sync with https://github.com/SUSE/doc-slert from
  pull (#17, #18, #19) and commit#9b7e6e0</changelog>
</package>
<package pkgid="05db27f452d09ce701e99aeb151f7bf71e0a4460e54718a5ee2762c6cc946fb5" name="sle-rt-hw_en" arch="src">
  <version epoch="0" ver="15.2" rel="3.6.2"/>
  <changelog author="jcheung@suse.com" date="1473422400">- This document was original created by fate#319435 [DOCU] SLE RT Hardware Testing Guide review</changelog>
  <changelog author="jcheung@suse.com" date="1479988800">- Update the Document to 12 SP2
- Remove the "Extension" wording from the document</changelog>
  <changelog author="ke@suse.de" date="1481716800">- Update text and image files (git: 2d6472a).</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1511265600">- Update the document to 12 SP3
  No additions at this point</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="jcheung@suse.com" date="1544097600">- Update the document to 15 SP1 (version 15.1) (bsc#1115921)</changelog>
  <changelog author="jcheung@suse.com" date="1571572800">- Update the document to 15 SP2 (version 15.2) (bsc#1154546)</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1601380800">- Update the document to 15 SP2 and to fix some issues with
  wrong SP numbers in text (bsc#933411)
  No real content changes
- Correct and simplify spec file</changelog>
  <changelog author="jcheung@suse.com" date="1619697600">- Update the content of the section about
  Determining Latencies with the Hardware Latency Detector (bsc#1185328)</changelog>
  <changelog author="jcheung@suse.com" date="1620734400">- Sync with https://github.com/SUSE/doc-slert from
  pull (#17, #18, #19) and commit#9b7e6e0</changelog>
</package>
<package pkgid="d1f7bed937df70611eea6b97f0a6d70c98cb62cf4735c65ef724e6994cfc48c1" name="slurm" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d12401eb998f738d703de901c9d2bcfea8e6768aca6040ce70ea76217bb55c4f" name="slurm" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7c94c06532503d4475cc677009dd66a9f03f12f69da5cfd00a7883b824a4cf72" name="slurm" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="799bc8c27028d86e6e2b8afffea97ea9f2efcace6738db1298e5a81e7bc9c0b9" name="slurm" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="192f070fe789e64437843370824bb0a909c8fbadfabf69120f399c1cc165a839" name="slurm" arch="src">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="330517886323586b52b65551074e4e2d8ba580316c295bc8e8cbab45d5f3140d" name="slurm" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="60b44cbf241a039d7fd6831b60bc43b5b78ba30527ba4e6e746fcc27f9f75944" name="slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a59d64eecfa3b226eb1da5bb1a6d718763d6a3d07d2974b52c950b33d1080fd0" name="slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="103c0af1d93093cef4fd5f11be0f3fad30a00d30f4f26d083d4109e60c421c24" name="slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b39d258653ddf324da318d41dfa35b2542c7a8279694596d9e65427c6d041876" name="slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ffaa1ddcf451c901c1957ba9eeecf3a528de8f3d5ce372e16b16bcde933e5155" name="slurm" arch="src">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4662aba8062bf2dd4603b5048429be4d103130ece3b142cd393597dbcfbfd2a9" name="slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="64160747f4fc1deed7add9ac280fbc5e129a138a995f76fc6411f03a67ed5940" name="slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7805615d59d7358d94d9a6da4c24f2e9ccaa0c5e5945c204efcac8f3460b5d4c" name="slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="22ac0c12761f0e3da3e2a7866cf0127171a1fbb99b251f0bcd7b28416d6fe86f" name="slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33be35cae9f11015959917c85bc11d4b02ec0839f4ef1df36c3a4fa9e7c7622d" name="slurm" arch="src">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fb6f1b81ab8e8de71bccae03a31cc19dda57b3f554d71abd43a9c0abee8572fa" name="slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="710dffc7f3aa00c5dca9b8e4415296385e94a5cdbd5fc71d9fc5ed8359cebc5f" name="slurm-auth-none" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9c614dd1e4d1b15c5f54c52629714ecddced9f223adf7305c0b71194d17c4e97" name="slurm-auth-none" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4733d9424b4f5eb342694eab6aa6dbee2ea937e6eb245d0c6f5ed56ff1278d8a" name="slurm-auth-none" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="06f2d2a7f4c6a4135bea29d9b72b46ff2bbc056c22b556a46c5dc2e44606e90b" name="slurm-auth-none" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="de47590287439ff23a64db9b6422e17cde9a6cae6ed64f84b0cc00a652772f01" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ecca4c7056324d017656f4b64968ebddfb6d64fbf7abe47774764c3d90f56938" name="slurm-auth-none" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54dc275eb6327f2ff13344178286bdfeb5f40302a2aeea00c82d1a94628d1b46" name="slurm-auth-none" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="361b7b249728bf5853af9394b3d82c6db60d8a324338bb12b3fa296206262367" name="slurm-auth-none" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4b2de4a6927811098916d9390503d57a27cd6f24c1ef9bbd7036df2c8566154a" name="slurm-auth-none" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59c734257734f7f4e68fb0312f2bb4d605e2e73499c0b1c3838730d788efae6a" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="793ceb53a06293f09e9aa24a4c5d9fb5eb2fd172cf184a0566bc8dd174e8f708" name="slurm-auth-none" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7fb4fce4b78b4b1ecf91ae682e13a87033d3e8508e188284c8125c25dbb71834" name="slurm-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e2538d0fae91bb9177808647dab4239495c110356201b54373c9d58ea5bb015b" name="slurm-auth-none" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="71bc3e4b62566e34fce82687ea9014c4610d14826c4a1b963228d0ee2f391603" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b1b671cfb8d755334d8b41a266ca5c7ce21e74574c0087b93ffeffac235f0332" name="slurm-config" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c080505205278ef728b902369e606103177e34e023b017ee4ded887b2e7263c9" name="slurm-config" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f1df7cd9d230effd9ad2dcac5f217eb5be2f20cfb795a699118d23634d16777b" name="slurm-config" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="23b108b019b8926d29df5b46958e3b16d61983d1a45d0b57fd78516cd888688d" name="slurm-config" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d1bea4382bb9d38a43641b297801267afcee8a54f347a9fd371ffde570e620a" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d495ce173bb507159232268d12181006dedcc969ccd0512ef189d28e0fda737" name="slurm-config" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e613d9c902f58b9d9daecff819a0c99c5e0f3c267d7121ddf9ec75835f8ea191" name="slurm-config" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bebc3f2a57b9730626d1f5b930bf1bda0f4646ac246ec5c63e7fd4c70a86cf67" name="slurm-config" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c461dbbc5db7eedf0c799d8095cfa0184f524f43435672c03846b056534a8f68" name="slurm-config" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="934f897533be1ecf00ac8c589ff9511b63ef818984db9497f1fae41fef4dfb43" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e718b47d5faf8ada0f1ac2290cf575bc77023f4c4ca90b845564645f2dd217e1" name="slurm-config" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c8c625f63638c95d4cddf10645600aaa6b0c9dcfb68e2fa771b89cbe27e3bc73" name="slurm-config" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="20dc71dc7dded0db5c09f05807b0bc4593eb7538131a67ef4f7f5be4e895ba92" name="slurm-config" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="90d0274087c665a7825e2a3f28a3809fb55179215b2dfad8b6f518f18a2b3128" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ebed2ca0753cc1023b69f5f75c225be0f54a05ccf6eca9c4e68c218462189c8b" name="slurm-config-man" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8a60ca2268d10a8061d1e48ab31830274a6ec173c7a3b4b8fae6020e0b05f73c" name="slurm-config-man" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="240f8a0aa596259f0083348c02d89291091b990e60154dec4b83d67c0abcffbe" name="slurm-config-man" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f889eea14cb34727b6b355bf20d337776146def3759c6a4185c7fa1c59b68cc5" name="slurm-config-man" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="15ae01ced676a2a445dc193f27bdf8c952e30ec1ec1faa15b1b0752b93b2eace" name="slurm-config-man" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1d69e5b507bba1dcd28f371b6f7de5fd2a9f504734cae54de91728e4d5141aa6" name="slurm-config-man" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72733edef271d1b51736920b1a09885d329088fba4e4a075d9b67f5a6364fbe9" name="slurm-config-man" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4ca9a76ce770249e32d143631e7f06e17708c25c1b4e40474928ad89d24c7341" name="slurm-config-man" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="78bd38f2bccd33bfd3a2ef5ff4cfe6548dbc3568db40366eb398f8b19848c50b" name="slurm-config-man" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9e57060c0f9707d04d6ba30c705dd8e41cdbf831ad5c8b4c2b2e439ac7d5f286" name="slurm-cray" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="efb0570bed3b310c71f9bce8c662ff07bedac11965576f554eb1574605aa6091" name="slurm-cray" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="20f3594426c482f0ea6698158893ea418469ca1f6adf9ed0251a4bf1e83f1a97" name="slurm-cray" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="53f0e63b1ce6cbd30babf8cfbe40fc0566e673c2d3596078ca29e91fe708873b" name="slurm-cray" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1ea9ff42bae5b085f310d38e47295d95ea4c53a847209ca8eb4d2a6a575eb8d1" name="slurm-cray" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39af7c9cedbd06d39afbe146cdd7072ba40d363a9ff7fa6a90b207b6ecc410eb" name="slurm-cray" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="efa67e659954ed12a4777d1c9d19811e2d0427f86a1cbdfc3c4979a8942645b7" name="slurm-cray" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9dcdbfa97aa657f5bfa3a0e5eefe01158d1ccf99b40bc11a74c46ab24a86be62" name="slurm-cray" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fc253bb70af8c262f4898463dc8992401a9e06d80f2bf290ff6e67214ed804bf" name="slurm-cray" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cd2ae3a5f38a282c2683ed111f64f808bafafc5347158edc073c677487dfccb0" name="slurm-devel" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8fdde7825bb28214e980dacbfa69c6974b1766e18dc97e7eeae6ed568a87223d" name="slurm-devel" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a6d3a715a707c9b747b83ea8316f38a58ebcb48eda15c1f682a11c2726e7c8ba" name="slurm-devel" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="077f8c2dd429c643f201fa893bf5a839229bcf8d15b17d2d0e1657a09a4ee107" name="slurm-devel" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9422be7dc9410f7d53fb0ea6c91aac9f182d9ea3da75549bbf70b735f220646c" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="17dfbb172c63de58e040714a825820698341736c431a8067fc6359acd2f77f3e" name="slurm-devel" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5c680308a43c471b559abe0886d20e7d04cd9babec370978cce981f07f042e74" name="slurm-devel" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e4211b1f5f2ca07e3e4d1c018f9a0e6fe5d06259a2f9c6abbccb44971fadc2fe" name="slurm-devel" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="709eb426f1ad9d318dc32822209f2e4e8c52cbcda2348bd23ebb44aca4174ab2" name="slurm-devel" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0afcfe3deed968576f370c5ca6cdebcd9b6d18d4d11c460790a58d8e8b19bc33" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9f2aaa89175d0460d614be563e6012fff1d963911b0a32089f7bfc03519cba22" name="slurm-devel" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b579cefb0ca5420f31d86bbd060215f579269e5a88d14cf9fcf6c67c16569790" name="slurm-devel" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="789ab84bccd67f5e43934e0191a8efbd9c6e4364a6befff18a4a68592932cfcc" name="slurm-devel" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="aef237febebddaeb67db9fc9d0a937af49975835f5000d5536dd82061f33db94" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f3b3dbc5169e2b699ecc2d5f63060c2b29a68c6ddb9610ece69644b14dded286" name="slurm-doc" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e46992a98a9f28ae19b1f45972def04fe735bd832d4cdfa5a29c956b9dd8ded0" name="slurm-doc" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4d27fb68e828d9324c465cdfe4e9970b8714e659630ecbf447991c6a4e622c72" name="slurm-doc" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6756605572717c5411245bcf2cde9123abd19af89df6fb58cb1e8541e598b08d" name="slurm-doc" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a52695d08359db794883f6f0df92a4ce65ef8489c83b90abeef1717bfd43b389" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72ef04ae6d6adb6fa3a0bf785ebc6a72a9d7ba4479cde3dfdb7952200dfdd15c" name="slurm-doc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="052385929ce2d7afcb16da170acaff87b14a4775a5a5bb455c1db0ed8fa67eea" name="slurm-doc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8920e72864d0d77c76748c6e9b49875194c8272c7628cf12d24cc9598cd76fa2" name="slurm-doc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="99940700004c2d9327564ea3108c0907253af8c55aa684d2d7f4703e8b3c9a78" name="slurm-doc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="97da2a4b588404975fbef6282d1c62f2a0df23a0957e7c34dfadab1c2030a226" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="da54ddd347550a424a3f996981e45c456daa374e03bc2b0f2255776617af4e1d" name="slurm-doc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc68a98060dc2ab4df5ac347a0f0c5f3677e870e9420d93d93dd2a50031ec2c9" name="slurm-doc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec5ac1889609d7b43bb788c75072e539af9b2614a01d4856ea903e9ea75276a1" name="slurm-doc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0e83d1faad9e1ff6ccf3c199b56d9ea90bcd461c7006e4a058ab1598fcec139c" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b8b2e2387dc711c0c7e9c542f000bcbccaad6f992c48d01e0917cda5eeb6f8a6" name="slurm-hdf5" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="069addc545499963ea0b15bdbfe63d4d8347a4c905517a2bc7bb997497570383" name="slurm-hdf5" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="17fae367e6f4849985c6e3b3b9b98dc1d02f5d96d358082c3cc50894dde12cc9" name="slurm-hdf5" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="076617a6d6bf4c147ac25ad99f86e3522600bf601611d2f209ea45baa8bca04b" name="slurm-hdf5" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0c8837c63bb50236e6c503054b4bda20f8c97c90d04b75415f7748cd130b6440" name="slurm-hdf5" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9df2ce3781c7d30ee3b5b39b2a2d1c57cacdcdf174ed8b6357f956936aa2bbed" name="slurm-hdf5" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f8060eb618cf79c145e500554537151a2d1c67900a0987040ea7a3698f45c8f4" name="slurm-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="92238eb54c799bb7c013d480977cf4e077162bd74623e78f79eef43835e59abe" name="slurm-hdf5" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="077dce20b08de78b56985c9e6916dfcc4b264e19718953cd90074b795a305231" name="slurm-hdf5" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cc8089e4a051acb5bc32d231ce14bb089134a3553426c97de8108bb24b19f889" name="slurm-lua" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4f996692307c76a5027324bcba2282d902108513b174f46896ec519c4c0ec04c" name="slurm-lua" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d020747f7d3e02b7d434daef020962d04a482e0ff33a02f346a53571c281c5c7" name="slurm-lua" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="468d00e379b16b3dd7e399e499d3c8bde3d73f935b4f54743134dfa5114486d1" name="slurm-lua" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="515f7137593aa27505e39fe018c21539405ef47d3bd4c20e054225b60c0499fe" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d64f87810ed351ac6d919f8353a5785a97d626820200106b3fd8a8d8900ea8ea" name="slurm-lua" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="073d45d20fae63c95f3db67b0797f9b1aaf731104f7fc63a53d69943e10fb8aa" name="slurm-lua" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bddc19d3ed69dd66200a6201cb092baff8257366d75d494572c00c6ee32df559" name="slurm-lua" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bb3be3b85cff864f90e062c8aa80c37ba8294017486830c41684af643a4e613f" name="slurm-lua" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e5fb3054b1910f3ac477c58c90188693af7d94f65e77f863a385dccf44c201ca" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f022b2262b5c5f7c8a736d4e2581bd72ca6f56ff1150eab53d770dd6ab05ff7b" name="slurm-lua" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="56ce4d0d73b436dafb9e7ac18237083dac845a9a309988a92091e2d52a881026" name="slurm-lua" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="df3086b6cd3dd1b744267bf6ba227223437f95adc4353e99ead7b47926bcb986" name="slurm-lua" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f6a445f5373581341525cbb7c7d1a5ea572c76f682bde71e1c944ad0a582852c" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3dc914f3e90cf5666695b2222a00f8ac15a6c4457cc941f9b5a0baed2e750e10" name="slurm-munge" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e45e0b170c2808cc53177abde15a487358fbe344640cc2466eaaf42163bb8ba3" name="slurm-munge" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7ea5f912ea0b7d211d709f6f8f683404731ba5c2524c4cbb7cf6fc370e727e7b" name="slurm-munge" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3a9788a241534846daa52ed9a9189425d7147a2573a786ddbf2e51321588fc92" name="slurm-munge" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1055e2ac807e8eaa3deefe3557cd45f2a3b126afd10ac6153eba9cade716e183" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="df4116833c2f2cadf3d156c060489c3fb55d497fc4814bacf3c09df1e71ca888" name="slurm-munge" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3753d71aeac010801e8179836310bcab8078573b91296a0508c1e3d6a748afc4" name="slurm-munge" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="703dbc2d34f8dd8b53cb71e283a15dd718d4329a37946bf747319e5a99d87de9" name="slurm-munge" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dbd6f9cad1b5b6147a6d935e8302a665d58e267a39d367aec1aa48e8ab5d8cf6" name="slurm-munge" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1442b8d02867f57f3a6fcac8582d934b06dfac5caa2f6437bb69820fa043b0be" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="70913f38174237f85b0ffe2d6e5b3b91b3142fa227e8adfce5c421ecba15700e" name="slurm-munge" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4efa99fa5bcb64a8babf027eb66983693f83facd19d2e6852802bac2b82b40f8" name="slurm-munge" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2738c3c4e9941f1adfd7aa193d2433e576fa127e33b7f65e2fdc61f2f0086213" name="slurm-munge" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="47fb7adba2cf495d9bbfd62331cf62eddad440e5d7871665a5b5f5d50712f56d" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0e7a019df0ff8bfbc215e9033afa8ceb3c9e27f472edbc112dcd38026e636001" name="slurm-node" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="23d8c3ca262f24c95bda61fafb4ff0ac303864ee36a1db46aafd0c142939f3b4" name="slurm-node" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d96da0209aa186318640b526025bdd84b21c3e896e603886948fa0ece966e8be" name="slurm-node" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5de1be74c4896acdc7f3e7e152e7c869d1e10513b612cb5dfc27ca343da70916" name="slurm-node" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cb848377528f1aa5d42ce923db2362a2e562ba80ea119e4d0f0599a052221eb3" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="aa78eb7e3efc5c3cdea36afa368c84e0830eb89be9232e19fc6fe75ea94b4c58" name="slurm-node" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e06d4755312e3319e635a2944f95411eb61183886d833f4f475567ffed1cc8c9" name="slurm-node" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="10fa9200450c180b0ee51d8c5be518fc93cf1fb4c0a05eabbe085f9978f9b07f" name="slurm-node" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="208368c143c2f7519ff3db55ef736db6090501f4e65b246e600698d789573812" name="slurm-node" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="131674d0424d1a8d0e457f344e9894930baacc321810cc5f0791d5581a708b40" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e673fd79b3c0378a96b75a863f967e2e1f857e875bf0f6e70e07e6cf61813dd5" name="slurm-node" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54212ea322b981c82c473e79b306aa26d570eed1bcd53ae16c8d24c60b0957f8" name="slurm-node" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6438e33207ad4642cbe9aa75fbeaa63da5bdfe4a85e7d2e17ff6e2e8256a4334" name="slurm-node" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="41dfb27d48fc036d7285266f990fb63cf3b78efd0efa2aa4fcf8ee41c217f28d" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d9a9b55d9d9d8db149714bfb1bd4d7b6eab97e88d474b1229d2e24e9ea2710d3" name="slurm-openlava" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4b9d144573590e0a8c8d0ad290cad1ac729cd7df580507a39005cb3db38055b2" name="slurm-openlava" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9ff2d66c3a64920559d6390c424411b1f0e6b9145b6bc2af30609c15206392b3" name="slurm-openlava" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7d1b9f68aa2b4ded31591f92b0f640c5e8d747ed547fa77080cb5c6b5df104be" name="slurm-openlava" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39f082e045a98df2472dd849b177a276a08f081718b7fb300d7e9946e0094832" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fbc3060b97b2f27dc7c0342ec2b3e86884dce613d611311652f126295650682d" name="slurm-openlava" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a0b928cf665e34c4e18617e4d634d979753f21c80093efde03483f419c5b3a9b" name="slurm-openlava" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="327cd304dd73f7e8ffed09fe1f5a5dd1bba66a69312a311c936cc7a9eebf84c2" name="slurm-openlava" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dcb5b89396e30ed86ec790bf46678cd7073378b5efc84ecff2b273bd5bc0a9dc" name="slurm-openlava" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="018ced7833a4e8ca3098e856940974bc6e306101b0fba5cb7dd414179d407787" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="04e8fa4f0f3a31979ccb3370e7007776ba6b23c7c097b26ceec01f51c2ce2228" name="slurm-openlava" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="901d9fb150af66b6578b89e9b24e818605bf2d0b06ea2627b7277b150794908d" name="slurm-openlava" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="182ba52b4c97a9d401e5f2932b82aced5b5b9687cc161fc1c0afd99b5867450c" name="slurm-openlava" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b578d96a26e9a1f1275212115db1d58601a857436c01837fbe8ab7f59276dc61" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ef7323e54862c63502aaa331e39566a8aac5988b7d7df612341f9c4cd401ffb0" name="slurm-pam_slurm" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8a099d322ba7daa05d7fa62c4dc21c03d2c9a517990217e0cf925a46a69d3525" name="slurm-pam_slurm" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d451d715626129e265875dfd5bb91fee870b1c7668c21ba2767b41407d997935" name="slurm-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c631cc591885f8e7a2a56fbd35a2fccc8dc2542dd6dda831147114d60d7910fc" name="slurm-pam_slurm" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0bed55159fb15cb2a6f27afae7927ce5c2bf29a0f252b596056c2d68643f5047" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f797b7a1d69102da575959f646bfe897e5ac43a653828c49651f2d2e93f8678f" name="slurm-pam_slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1da80fdb8abc143390a4fd5cb99f31ab1a1ea8f5ad11350dce22bd7a98efad4a" name="slurm-pam_slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="79806b3bccf1372b0be06eda2e0a042c724a5f6a37eb0d877c3f8eeb3f69dc31" name="slurm-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f725ce5c3de97cb1aba5fb2e9baed1e5a7eb3cc001624d23536cf343d1112c4f" name="slurm-pam_slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="18760ec674ca0a3c7b43396bed91489dc022cfdf154902cbf8d27bbaa544fdb7" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a706e8c0411cd8a965dd0bfc6c0756ca8db3406e30f30d0456aaff997a48ff0" name="slurm-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b0a2ab393679603c6d11b72f2f86dcd4378767be86060aadf086d14620fdf587" name="slurm-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1d09ba38b8eea2874f92d1a4fca4c038ea0eb537c56540085ce8abdc20fe4dce" name="slurm-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2a77806e8b72bd3e3a33084073a5797d7b0ebb9a34f9b4a65c4546b32728559c" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4c91a3dd43fba96d01dc22e97d4ce2f469895e370dbaa816248d517e71cc4b46" name="slurm-plugins" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="28826b99453e1b2beac7c49ed6f598b2c22bfc80d771646f096a234977f194cd" name="slurm-plugins" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="83be62248ac66a966ba7d859250a7e2e8d67c0d07fcc319c6618d6c167de932f" name="slurm-plugins" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="234e878d8fa2bfb5421a1ee2f47ad09af006c5d83181bd2a333a4a9cd0357617" name="slurm-plugins" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39ac5d232899f7a1199d55dce3584e07ef83cdde8bc7714e5cb9292d90bb5dd4" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1e4c898d9ebb55a2e9a01599a5086ae3a309d7311409c7c7f9db40a812844ee3" name="slurm-plugins" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="805d3549d3f62f980ffcd518eb9a4c3c680ecc2bbea4d00a35cf92673b4cba7f" name="slurm-plugins" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9ea87dbda1ef4c05dc206555576ac8b48db52c9a32e00e773ce671012fb512f8" name="slurm-plugins" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="db25f600a56e4342687feb2990fa1382a87740e5c096eade9f3d2d453ed2eb2c" name="slurm-plugins" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a77b0a62254013d8730c2e0132b18e0cedf83168acdecc4622ba0db7466f839" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bdc57541658306d74c6ed5b3d2ef1d10a36deb40ce01d47c4f6dfcc57a970072" name="slurm-plugins" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ed24723bda73998f2ed7f8b1749e7f9d25ca1fb3f20610013f0af0ebd8d6e1eb" name="slurm-plugins" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a2e906efd55a9df015fc20b9771094c5a73d7474440bd1520c3f08f9ad899b2d" name="slurm-plugins" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b00ab5b1ee7d4ac06cc247246a39be290639ed3e358d4e87009e5a049f640e39" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cc9450f858cbfb572542a7c927c2ac107a6da56137009331611b2099d31c8585" name="slurm-rest" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b97952a0470871223edfba46f55e13f871efac6126eed65887c1b6fbbb1a2c40" name="slurm-rest" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8b4bd6f4d12a8e110a461bbbf2e7b21be2f01ea04f2eff1e70547f0d5569fcdc" name="slurm-rest" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d9ba5659bf83076f0d7d4655f61b60260d170549530b18cc7d35b21046da61b5" name="slurm-rest" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a8d5cb81281c2390601b24ae6b2af4690a25060d5d9868a8ce259fd56e60e5b2" name="slurm-seff" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6fd4221f3c9f3f7980dea94b6f237c2c80a0a531ecdafc43b990262a0c688c80" name="slurm-seff" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fcac343c2268e068c6b736da3214f4b6572688dbe5654aa9a8de37cdf2e0dc17" name="slurm-seff" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b9d31970dac98657eb0337ac3e89470544e088156a2b82bff4aa8da39e14db70" name="slurm-seff" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b04a26e7e6b41aca1a95c737f3b678e75d7aa99c0a035e7e536abd58a18a91bf" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d6b7a1d038ffd4cd7088c0aa95d0d43179ea0dbdc28e1a243194abed6da7d5e5" name="slurm-seff" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b2b1bc98bdb00a2121d28e9cc35c34c254ac464d189aa74b173e09ce1871d7be" name="slurm-seff" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2be7a9cb05d49a714ce96b9f5a061fbe37b57a3d5789a682ab5a0ee045cc4458" name="slurm-seff" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ac71d9b49616883c56cebd88cca6d529fbda378cdacef9486f7f0b632b8a0911" name="slurm-seff" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9511c569f2b04d17271145f1a6d230c6111a9a838396089472f6cd20122b526f" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8ae0a0a8776ca7f919275afd228eae6f95d7938d2fc816efb80a80a06b709e3d" name="slurm-seff" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1add998e5f5b5c0fa131437456a02fa727b4a85fb0744d2c91094daa43df896c" name="slurm-seff" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5396698f72b40c226b17d6a4f37610d52b598f635b04d2407078de6e67f6ee48" name="slurm-seff" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="eae4b0e0eb7b703df7fcfe103ba1e05c1a4ae531fcc0461dae135e801a392a15" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54063dbaa4096234bb304127a132ef4f0ba963b9ef99120f989ca55740e584fb" name="slurm-sjstat" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ae802dc97f897afa2cbaaaf504f7a320be62b9ebdd36bf5e66939922b527fb0c" name="slurm-sjstat" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b0051fe5b7d2435f16bb32bc8dbb587d8d810d7510178b7a02520e54e7fd9024" name="slurm-sjstat" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="38da04ca007baa45646fab8b75487aaf538672e339608e6551f20babc0d8392f" name="slurm-sjstat" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a1c8426fa032339100a3f9cd75b8de9621e9f3b7709e1451c3a786b7288c6d1" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="77bceaafea7195c85269777787319130bdf770cdbd966dcdc5d9dadb65bfb7c0" name="slurm-sjstat" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="89d4778fdbc29a47c8547913ab4fed26f6b097bb27b77ee26d9ecf992cc1da8f" name="slurm-sjstat" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7bc768d09b1c3c94b39f286906be86031c34b31bfbbba3e569934e4dd8acef6d" name="slurm-sjstat" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d83a4506ec796549ba5c7a40417b89ddb36819440292c52fe51c3b9fcfe09278" name="slurm-sjstat" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9b8c077bbd34e63021af117ab6366d7119140a7fe7be37f843c3fdd2c6437571" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8d862699173bc850411c39364e300ef31da25bb2430f31414afe58899ecf5ae9" name="slurm-sjstat" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c7285bc0e47eb55959150ec628ac93c64fbeb24106387565fd0c280049a8f85f" name="slurm-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f28f4b73455cdda4427c3c2202c94f3559554b53732c2c396eecaef345907c92" name="slurm-sjstat" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="adcdab58579cfed1d2656accab9c9eb7e5ac8c35b1864a1036fdfc17ce6a8c38" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="546136b9e1704977fa3809933682a3317aaae1c616a571473cb1233a23d726a7" name="slurm-slurmdbd" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f199032af9824a5686e6fe27c35d9b79d633bfed1af70b5b195949e1e3af3446" name="slurm-slurmdbd" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d09cd2af91d1e40a95fbc0dcad0441a7d1fb73bbc956d4c8d1fe5fc8e8a9180" name="slurm-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1c1fd17f648b6b0cef24a452b571f01c6c70bda67082c48dc2c915051141d0ce" name="slurm-slurmdbd" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dbe38592dd95002274296ac378aab28fa3f5ae98c0db365e8962a89e05dee6a3" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="47446e81d65922839479d585f15021f28a8ba74073c808234447fff875906b8d" name="slurm-slurmdbd" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7a7c5362f49edd3c7b447e89734a16c8b0ca76bf0feb0e257e172d80bc4c7515" name="slurm-slurmdbd" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6355091154b2eb97ac94747085dbfb97114159e85f507a1c67859fc69b89e064" name="slurm-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="677cc498810abb70e7ff4ebf779cc09463822f29d5261cdf03df2c0999df3890" name="slurm-slurmdbd" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="12c74d39ea60ecafa1c1bdbbcd928ee07d7e81dcd82ee68daabe8140e19f2e46" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="94e812adb73e299b71789ba8a48d0015100e3292239781eea06c3bc4a24bb81c" name="slurm-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="be6e0801b06b9db3bf7d6165b791a1a8e67b1a6cf8d48b991b4459f92bac13f1" name="slurm-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="419c9c1b652a54a16e9fe7e51876b07fa2d32003823d6171a7b727d7cc2a824f" name="slurm-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="66ad5ec8074eaeb65a168b4ce19eaa8e4ebbab55dd4a45abbea55611b62acc0f" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="68ea9a44c7c571f96833b0ecbeb9d02662d803a7f7fe32a8f75e5c3f07bee110" name="slurm-sql" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9c1e1719fd8268f1ca1290ff9a9806c3248c9a6460057c08cf4985003b47ee87" name="slurm-sql" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ba229a6cbeb601ffe5cb7fe7c41e84010604287a0017bda43677d6aa63ccef30" name="slurm-sql" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e1fece33c9438f34124a250c15230b1f11b7dbb5a93301838efb08d95d14c604" name="slurm-sql" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7c8e3a5d86e83b626e12e3c070129042b9c0f8a78c85a2c1b2353c1d810de1db" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="39de10c241c4d64cf044ec80f735300222bc63761369f169f0910a947e192f60" name="slurm-sql" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7a06d7e5a772f016eb70dc8820ddb3e417f0a8d845efd085903dc4d62f2da9d5" name="slurm-sql" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2108a958d27597ba38d970363db187bc13e7165b7e7240ede4713ccbd8fa0491" name="slurm-sql" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d69d70634a6cb94ef2723de854a9e19c4b61389ab6d0e1d0dc1891b1b2f3ae76" name="slurm-sql" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2bf78b3a2071338ea087e9003a464509b2396b45de51d96c867b82dadd167dee" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="210f7dea5c739d8a1aa95445f00740bb8730e6f093e5e100488b2ef0c80350c2" name="slurm-sql" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e7f8a75873ada2dbd6c0a692a5768fbaf2dc478a9afd73d2270b81c53b8b1579" name="slurm-sql" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="08a7c2e25fbd2df3e57fbb70e636e9bb66264d5ecce725dd5425a83c91baf46c" name="slurm-sql" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="25202aeb806295b7a65ba49fe7bf1bf4f58351d68f6cfba4425f152aa3056359" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ee766bd45062fcbfec889de8110d5346c4774ff8614b3a383d0137219c1c08ec" name="slurm-sview" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4553c327e1af6224c3b6409788543ad4d77202695e4ba97f9825646013a9f868" name="slurm-sview" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="33c23346ee8737b95222aea3654b79899a67a95d78ded1ef6006b345a6095424" name="slurm-sview" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="297f642df47c4fcaed8f2a466b5f24fd7c9330d6735f6828df3edfea1ed74824" name="slurm-sview" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="74ca280fd37fc2fd6a764dfd56ed3c326fdfa5f5419181b25efde2d30efe35b0" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="367dc78e39995413bb780bd124cb2e06b9cc88cc480d2c3032c8eb31392b445f" name="slurm-sview" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="617c995840e75f00a05af6da19c6a83bc18ce8b503ed86e48946946acdb0fb6a" name="slurm-sview" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d768be6fe170ec76e1cc5760963f31d65a0bdb5c5755ff2ebf31f1167d016461" name="slurm-sview" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="537c54568aa560d9cc02ad996c39738866e9ceaedb304cfcd8dea59d7bd6ace3" name="slurm-sview" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="939152a20edc114ff1c2f5943ac3ac37567a57e5658c0ab12251aa76698416ac" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c23ecb25e8d639ef6c7508ab4175bc24fec6d16b6509df5624b2a9747d0a098b" name="slurm-sview" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="435701c573b6e57c54e7412863c0751d8f629566e5fe6f6509e0e1c37b7a9461" name="slurm-sview" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3c94a8b8668a2e8fb7693309ba31af38ad7fe6ae043417e75207e96c69d08aa6" name="slurm-sview" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="13fce3643f4c1eaa455aa2827e183febdfa411628d715966ee73e4d92e66a40c" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e0db3679db7857213f228da4af3719954d77ce63e40c09737a34be6e64218120" name="slurm-torque" arch="aarch64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fbf2446b8cf20e4313e89d0643bfd16ac8ad8d6b686bbc9ad7c5e58f159c15b6" name="slurm-torque" arch="i586">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2a5082636e93e1d87635285d4bda2d01502782962672960cabd51b541ac61f59" name="slurm-torque" arch="ppc64le">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e9598d651026e39d3a179e1d03c7d0fdcab91cb25a2302b6dea1da629a31c86d" name="slurm-torque" arch="s390x">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="38bf57b1e5f848e713108d8cbadd2baab99013f1f74324c3af88b50b10319e1c" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="17.11.13" rel="6.37.1"/>
  <changelog author="eich@suse.com" date="1570449600">- Add X11-forwarding by adding missing BuildRequires: libssh2-devel
  (bsc#1153245).
- Move srun from 'slurm' to 'slurm-node': srun is required on the
  nodes as well so sbatch will work. 'slurm-node' is a requirement
  when 'slurm' is installed (bsc#1153095).
- added file Fix-CVE-2019-12838.patch
  which is the backported fix for CVE-2019-12838 (bsc#1140709)</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1572523201">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo@1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="eich@suse.com" date="1575892800">- Add libjson-c-devel as buildrequires.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Backport: srun - do not continue with job launch if --uid fails
  * Simplify-logic-in-_become_user.patch
  * Do-not-ignore-errors-from-initgroups.patch
  * Do-not-continue-with-launch-if-_become_user-fails.patch
  (bsc#1159692,CVE-2019-19728).</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621512000">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59e511b1c1771825cc1a04b488b843d2055e6d15e0481b97d82b1a03a9f2935e" name="slurm-torque" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c83fee27db19546857072a85de30907e1c5e94996ae4b9587a910e6f37593fc1" name="slurm-torque" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d8ef5008fad23e4c9250da09f49492d2f8018f6eb8aee537489cc135b0cb1332" name="slurm-torque" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="410fb84f199174771a2f71ab2e82d82d02b731de3bc8c1f03246bdc0ed313b06" name="slurm-torque" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c67bfd65a4e9299da6e1934b97d135d97624cd136c0299d05b970939898ba260" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f19b4d2beee2ceb12907e9844e4569d7baeaf334a327bb87eae8422e54a8b302" name="slurm-torque" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fff90b255fde18739ebc5bea9aa5a535ebda5f4ac18c34b16785e6c689e63265" name="slurm-torque" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4a96afd0c9f087d19dfed4a1e70cf0b72503fe860f9617d99727fe1dcc417a02" name="slurm-torque" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="71fa9e331d2750afee47f91e96c85c073e6ac803915398f440aa536ae85fec43" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="11e1aa2e325bd233e26b607420eaba2f4eb17e20e36965fe1805141890da5944" name="slurm-webdoc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="67fdf05c3f859365ad5deae29ed1eb3c85b8b8e021e5e42646e3b96da7df28e0" name="slurm-webdoc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5d9769da1571ca8c9fa2356d01f81f92bf10e62fb436f16cdd18cbe33308b5eb" name="slurm-webdoc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="62e931be3db95c715feb124c37d4d91d903fec9b5f3d9a41f7dadb27a09d143e" name="slurm-webdoc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4eccb0488c6bc5e799f2f0a4ffc211b4961bfefb17b65cf92537f228cb77b7fa" name="slurm-webdoc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="3.19.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ef258c38a854118cbefc510f602cd2abeae84ad5d6dd9774e0890f9b0c27eb5c" name="slurm-webdoc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0588371da4281c38ceac1d70798ad0128841dffdde3cc0c82d774b7e229cacba" name="slurm-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ffb7d224cec4945f94100f5c29d110873307b00f5582a84f7da7d58a582085d7" name="slurm-webdoc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d332853b7d756c2144c48eabe4344a36b642aa317785f7391de3a9007c7d2996" name="slurm-webdoc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.6.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.0.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="57815d34f58bb41cc8338021d414ec4340d4173506c91ba39c14c4fe0a2e3d6f" name="slurm_18_08" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="359243545daa63000c8a29f209211f6afa0aee6e3d7f34292e705e804583f02b" name="slurm_18_08" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2676d5508eb3faf88d544a2798f1a6e661ffc908e168ee3bff587e36b90ee704" name="slurm_18_08" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0793285e3c5d28fd9d9a7a0872295869edc522960451d0a7d4a86469391e1552" name="slurm_18_08" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9c3922234d47af640ee312ee614c2a0825e57eda3d7185dcc017882fcf448591" name="slurm_18_08" arch="src">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e981069bbdcf3d061747034c6eda28329d37d9b8fd1c5809c05d98dc6a7d3a30" name="slurm_18_08" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ef8116b4764e6f4c89c1f69a7f86c2f4f868ec1f959f561a8b27fef4227596d9" name="slurm_18_08-auth-none" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5d28b222018ecd6c89682254a83a7bd527a2d72be0acee59539097d3d985f6c3" name="slurm_18_08-auth-none" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e596620f43e6e2f96a33f3ad6fd19e548a872ee76d5c7a697ab5223d21ef94d5" name="slurm_18_08-auth-none" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="003b195dec3a4264cc347bc2907e592e0d9025ad38ae5fd813f51d805be4277b" name="slurm_18_08-auth-none" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e30bd350237ec05ac2846aa531f21eac8a4036a95976d9bf369ee8e3e43946f4" name="slurm_18_08-auth-none" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7d9bc01b2e96a979b037bf2e114dc6d13d6760972fd5979055388eb5eaf95e92" name="slurm_18_08-config" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8a09197f5aa198c5ba2704bdf253c360c552f0c0386ee1f5ab5803146e9eef64" name="slurm_18_08-config" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3a99cd088f726d47b9742ecfee0b00d2b8a841fd2812f847f59ca3981909d828" name="slurm_18_08-config" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f5ef45d2dc754d1cc3623b2b134a1c2d47d0e8a012c383d2686588161c53a3b7" name="slurm_18_08-config" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="329cf5b228fed508443cb4c4de437247ae4abfdad909be756ae8756bf358d8a1" name="slurm_18_08-config" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ebefc201d9542d27d962257cf0b0ce6499c335a0292b0cf3f5a3b7b3d7154f9e" name="slurm_18_08-config-man" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3a7033bf6ae934a0d954e14dff60e262340ca2278d94a2fe9816d0285a3b5ce0" name="slurm_18_08-config-man" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="13cf2943a9d2ae4424ffe25b85a955ed066457dd8dc7c935b4dc708c42a86788" name="slurm_18_08-config-man" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="41b3c85fce5c9e76164ffd8e62a154ac4d2e29cf9fbbc52128cd4a3f22582916" name="slurm_18_08-config-man" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7122e111d6db45d0bbf1f87a16c21251ac97641af0716fb101404dc80b9ff441" name="slurm_18_08-config-man" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="24a47eed7a69e5a505d885ae6eb47f5f113b83ff398c02b7db339d223aa3f01b" name="slurm_18_08-cray" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9f2a76e23f0a157de94933424d59a4b3758b4f561b4656f8c2f9e36fcf6fdb71" name="slurm_18_08-cray" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="96413d11309b8ddc9ecdb5faca4aca07a6d5a29eeeb9277c1381ae171944ca3b" name="slurm_18_08-cray" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="add97785382816b5cbc90ef7721062f0875518eae65192aaff022a88a533dd20" name="slurm_18_08-cray" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c749bbcba88fd4fefbdd412ba488a253131bdadc9cfee5de0bfb98fca6cc0aec" name="slurm_18_08-cray" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9df4b0e8bc9dff484d3d9c6744961e64e6892096975fa1e4b7886e6dbd4ab930" name="slurm_18_08-devel" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bc5640ed47ba645d5d4ab75dc500620a7f52556832b11653d55c4b0d0f8b3593" name="slurm_18_08-devel" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dcc173cc6d0a9d5877269fd040fadc6ac7e3a27c7a21bf977ed5998b9e6e6fa8" name="slurm_18_08-devel" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e5400189e6bbbe2e2e057173dd03f32190a061b013ef419b6213e68a03269c80" name="slurm_18_08-devel" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0af4fa8bceef1c9656067c9abe5159b5c08899b597db42b8f1e0803c77262af7" name="slurm_18_08-devel" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e424a86d9517c13e8b386ab629034e3d8369bdd26bc0c73e781e84f351ff0aee" name="slurm_18_08-doc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1916eefa17fe807493f198fc2e6a1661152fd22f815a45e8f7f28ab74c7a6e0f" name="slurm_18_08-doc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8038bf05803baa34cdb90e189e99415931925e0fcbe8254c7ed8a7f5a55b0759" name="slurm_18_08-doc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="07c4407e46890fe3ae32d2982725f179379dfcc00ed78d35c1a425ef3200e1ff" name="slurm_18_08-doc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7579df51525850657ef9d6f3fbe118a3c18582f5285c9fa247dc67e3e41f2e64" name="slurm_18_08-doc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5d4897fd10e32b7d92b034db2dc234f4d470d8d5bab925f82fac32a5b4417b77" name="slurm_18_08-hdf5" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4c6b8947e6b9ef06586612bde32edb451241629dcb84975a614ceb803c41c089" name="slurm_18_08-hdf5" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cb3e62dd39b7c56a48b974126df495a40da8cae9947e299c6690996097ddd295" name="slurm_18_08-hdf5" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bbdc2a806dfe693d76c9bb1f56e480e02a272c17af619a02655ca8cca10f3d03" name="slurm_18_08-hdf5" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="20a3ea4c755b03dfd9d3f430e968df2d927a7de6333f23f61e59c821ea6e3e58" name="slurm_18_08-hdf5" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="eb40f04d58ee03f723e78b95d6d5021b2b63af6a1ab83e108c3afd77e90d3c82" name="slurm_18_08-lua" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6fc458ea6aa965abebee825c0bd1d2375c8ac6c646d1bd9cdd7e951f3747405c" name="slurm_18_08-lua" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="67a2ee228ff13310e0199a5cb159743dad546632285cf21d42b5a98ae832ca18" name="slurm_18_08-lua" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="51ea906c46fd0b4dcfe6f4b8b0219a65885f9ba69b80daad832b7353d429548d" name="slurm_18_08-lua" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="da7bbdab0f208c8ed46e7c5ad223173cc7665d210d97d452ce43409b080011fa" name="slurm_18_08-lua" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f40249462237a6fbdb9443a2e18e157e0891808e7178335b93d869613e5ffe57" name="slurm_18_08-munge" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8aafd564ef44d32074469f91214e750ebc2af4daeb44ace7739f61a93e84b72a" name="slurm_18_08-munge" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="11eeb6732d0ff2bdca430bbc20ed8e637ff2685f23401dbe724169f226e5302b" name="slurm_18_08-munge" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2364e7c8bc1f4f75ae2e6ceb27c14e45070fd9811586dbc8057718735d1a074e" name="slurm_18_08-munge" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cfa8708d1298fd220b832023a716f3d1ab1ac44c784e099ed4da30de6a9b126a" name="slurm_18_08-munge" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="98368ee04f4f87640e345c14ebd1206c5476c074a72ce291385c82455ea38944" name="slurm_18_08-node" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0da4f11c55fd35da883d6660e25361ba6e0981a769803e3477dc6cc81783d70d" name="slurm_18_08-node" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c1cf7509ded7c65bb03b27857ddf9a086dd293fc9e101d13120af7ffaa6efd2e" name="slurm_18_08-node" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="73a3040ce0cd9b40388f5dc068e7fea192a67c705363c449de0fc31eab4468fd" name="slurm_18_08-node" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f4623e4135cc58853a9ff5f0c6eac5d72f1ad1990ed55a589643448e5cd393cf" name="slurm_18_08-node" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="36b1d6df02da04aac491b12ef027778627d649d951721feff71101ba46b997fa" name="slurm_18_08-openlava" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4f407f50cab942e6530c7481e9a24a91e738efdd9e42399f41c3a06da2b72fa3" name="slurm_18_08-openlava" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7c25d9235288e5ccc1b07fe56133d6348fd94965dbbad17bcb5152f58c2ef407" name="slurm_18_08-openlava" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="459912e05b7667fef8f891f6f98fc3d2a3e9e6efcc4b5938ed23bc1a183fd51a" name="slurm_18_08-openlava" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cbc9be65f03377abbf0d7acaffddd5275402b6e2aba90c6c91afad004880ea74" name="slurm_18_08-openlava" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="5785a0ee32e864cedda53d70bee2fef88e3798ad26aecedc3ecf2703d17cf3ce" name="slurm_18_08-pam_slurm" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="95da45d7f94eb47935e63ec73af6cdd1b9f5615ab252c14172c06be8a037e6f1" name="slurm_18_08-pam_slurm" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="80b210024ca5aba2d8ceb6fa7d14d8e9e0bd5f607ab28df9b32213d1e1512b30" name="slurm_18_08-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e1c2e28535a4d3f9a62d83927529d8838172e91b4dda54f90d420e9b4e1306fb" name="slurm_18_08-pam_slurm" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dcf70bd618c3910b17fc041d4c8d23b98dee8b350748cb8491e66c8dfd4388b2" name="slurm_18_08-pam_slurm" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f165091043e10d173aac94e52355e2fa6a862999c011a65ad12dbb88a9972484" name="slurm_18_08-plugins" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="152cf161e6ab95b5cdd8b0f16e35ac67aa70db0cc70c045d008e258a56ea4ed6" name="slurm_18_08-plugins" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c03d0622587cfa607edf628444e95dcf33bb04865fbee73238dc2e38125b5e71" name="slurm_18_08-plugins" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8153bbb7bf0535466f5a06be7565cd7f78661ae84d5a0f6d68c9374035f3e720" name="slurm_18_08-plugins" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="73e2cefbcb2a331b2cf42c1b55a8e83541d8d7cf49f0dfdb6cfda02ebd8c468d" name="slurm_18_08-plugins" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="73385c89e349631f880c15d37323697fb73454b9a820c898d3743c351c5c91ac" name="slurm_18_08-seff" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b41018efa8762ff386bf35f3143fb4523aca9a507961fa82abea6870b0fa0209" name="slurm_18_08-seff" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="80c51f706ecb66f7f3be0805e76612d873389f610d3c729cc7d95ffeb63faaaa" name="slurm_18_08-seff" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b68baf17c72435c54f5f49edb82fea9dcf615493f8c501f4e7333040155c2f37" name="slurm_18_08-seff" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="869ae4df737d8829311dc3c8c68d10217aedf690ae4eb7859bc3a4232c27b61b" name="slurm_18_08-seff" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ee01f7481cc85f78229bd5ce70f788b2575f25b43a00b02434a33fd28f018628" name="slurm_18_08-sjstat" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e43960eca41cbd9042249d03f8bf74ce93dcaa2e06161d65d9138fb2b68d7a78" name="slurm_18_08-sjstat" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3482f7e94c6d63cd41d080588e08f561e1819bbf65b0812688a2c5e668416d07" name="slurm_18_08-sjstat" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9b9b5b1d13a67c613d7167f963aff46b5aa8ef44af7512b084c78574653ddb8b" name="slurm_18_08-sjstat" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6c545874a5a7347884dd17ed3f8b66c72003d2f2026a87f261970ffda51f4cfb" name="slurm_18_08-sjstat" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d2dec9d3f89bb1bae45e8b34079e5995f9342f30229f53be2163db9a73c1661" name="slurm_18_08-slurmdbd" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="159202911986259ea246df3d19af6fe56308f08628f2284b8ad536d0554b9055" name="slurm_18_08-slurmdbd" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3d585d90d90b9698efbc85ee5a50a036c577b478333e78995d4ac4eb87b8461d" name="slurm_18_08-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3e6be02a23bcf2f8a527f557541e3ed65d56d378fe84ea921e000adf9ba0be6d" name="slurm_18_08-slurmdbd" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1e2fe83561ccbafde6fd37259ba0ff60b0132a9dafd76bccc9f6d1311efed69f" name="slurm_18_08-slurmdbd" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d03b068c5eac8b16d414d7e7c0cc1b0d7ab5acb831945c0ce7ee545258912656" name="slurm_18_08-sql" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f2a95b487a1e562e04962906d2ec80e2d06c5b0f53958d50e01c2ca09b0d6dac" name="slurm_18_08-sql" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="829923356296832db86f85367ec439787ae7118289e6e28a04351647c3bd9fd7" name="slurm_18_08-sql" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="680cab48c41f0c326c369fca316fdc4ba38b4425dc4c716294a1ef518d2e4f6c" name="slurm_18_08-sql" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="973d23060bd72af85f92c7dbe8569edeffef16699c5b7672f6d2cd6aa5c96e5c" name="slurm_18_08-sql" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ca10fda3bf77e9721bcfe4bb605375dfdc568c7d503ff813a80b924560ad22e1" name="slurm_18_08-sview" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="2ddbbe4a09e6b4c84d20be7998887f8414719e9808f8d1c7d425b922a40d0f8f" name="slurm_18_08-sview" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="931a8e5c35bd5ebc2d8dc9a1b1a8b1b020653199996f73123aa73eeed2f0a369" name="slurm_18_08-sview" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54d1aed0e379619c218b95f3ce256f1bdfa393f24cb595a66d6b2fe88b8c0987" name="slurm_18_08-sview" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1027b8eb738692987b37cf48d5af2276dc8df133ecd61d529d6d3f43df8b0402" name="slurm_18_08-sview" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6e9ebf1753cfff12362ef5a0a1eeaaaa17d2b7baa81159c6be958612aa9f841f" name="slurm_18_08-torque" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b3a27ade6fedc6b930fcd79ce3bf9c85087b82cf11a5df79d442f1ff5fb45661" name="slurm_18_08-torque" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="31f6f989998fc34231142c4ee6e18c49643ee632be3939bc0573864fcb49b1b7" name="slurm_18_08-torque" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cb1b2df9a17cdda5bb7673d5e5eed5df859d407bacd81fed3c4589a4be290cfe" name="slurm_18_08-torque" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3a9ed6ce51dc9045f8d6552793856d79ea4da3bb1febed8656c602a131261bb7" name="slurm_18_08-torque" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a0aea5f3f59af51e963798e111f5734a1a3878ace469ff037624b2e9aa3dbe95" name="slurm_18_08-webdoc" arch="aarch64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7f94d4456bb6f7b0ab2d304605c470be278c7defee99cb21e92bc0f14a980769" name="slurm_18_08-webdoc" arch="i586">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="09a7f6189a741abfa36abef8f82dd347db89e9cc70a515db632d3a17142f1c2f" name="slurm_18_08-webdoc" arch="ppc64le">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="198b301d36be18e95da0ede98cf3a14d563504454c4983d2fdef9ae5f226188c" name="slurm_18_08-webdoc" arch="s390x">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="472ce789ff56bcfcac8cf9e4ee6e14cb5ea154b46cec3f39561a880b6263aeb0" name="slurm_18_08-webdoc" arch="x86_64">
  <version epoch="0" ver="18.08.9" rel="1.14.1"/>
  <changelog author="eich@suse.com" date="1571659200">- Add package slurm-webdoc which sets up a web server to provide
  the documentation for the version shipped.</changelog>
  <changelog author="eich@suse.com" date="1572523200">- Fix permissions of slurmdbd.conf (bsc#1155784, CVE-2019-19727).
- Fix %posttrans macro _res_update to cope with added newline
  (bsc#1153259).</changelog>
  <changelog author="eich@suse.com" date="1575633600">- Fix ownership of /var/spool/slurm on new installations
  and upgrade (boo#1158696).</changelog>
  <changelog author="eich@suse.com" date="1575806400">- Use --with-shared-libslurm to build slurm binaries using libslurm.
- Make libslurm depend on slurm-config.</changelog>
  <changelog author="cgoll@suse.com" date="1576065600">- added pmix support jsc#SLE-10800</changelog>
  <changelog author="eich@suse.com" date="1576929600">- Update to v18.08.9 for fixing CVE-2019-19728 (bsc#1159692).
  * Wrap END_TIMER{,2,3} macro definition in "do {} while (0)" block.
  * Make sview work with glib2 v2.62.
  * Make Slurm compile on linux after sys/sysctl.h was deprecated.
  * Install slurmdbd.conf.example with 0600 permissions to encourage secure
    use. CVE-2019-19727.
  * srun - do not continue with job launch if --uid fails. CVE-2019-19728.</changelog>
  <changelog author="eich@suse.com" date="1577966400">- Deprecate "ControlMachine" only for SLURM version upgrades and
  products newer than 1501. This ensures that the original setting
  is retained for the SLURM version shipped origianlly with SLE-15-SP1
  or Leap 15.1.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Fix Authentication Bypass when Message Aggregation is enabled CVE-2020-12693
  This fixes and issue where authentication could be bypassed via an alternate
  path or channel when message Aggregation was enabled.
  A race condition allowed a user to launch a process as an arbitrary user.
  Add: Fix-Authentication-Bypass-when-Message-Aggregation-is-enabled-CVE-2020-12693.patch
  (CVE-2020-12693, bsc#1172004).
- Remove unneeded build dependency to postgresql-devel.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- PMIx - fix potential buffer overflows from use of unpackmem().
  CVE-2020-27745 (bsc#1178890)
  * PMIx-fix-potential-buffer-overflows-from-use-of-unpackmen_CVE-2020-27745.patch
- X11 forwarding - fix potential leak of the magic cookie when sent as an
  argument to the xauth command. CVE-2020-27746 (bsc#1178891)
  * X11-forwarding-avoid-unsafe-use-of-magic-cookie_CVE-2020-27746.patch
- More information at https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1621425600">- Fix CVE-2021-31215 (bsc#1186024):
  Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d59a7a7d3fa3325383b8c62c5e398581b347bc110750cfa6dcbbb1430803efa9" name="slurm_20_02" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6be5717cf2b7c81ef75ea28039cef2121c35dfff148f1590bf2fd0358a194a6a" name="slurm_20_02" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c847a5411780d9405a3194c2adb24f92e476831d5f140cc681422bad3ecea560" name="slurm_20_02" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bb54cf70c2471d897f1b76474cca0369d01dea6737283ee7fd2af3cc1f6df008" name="slurm_20_02" arch="src">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7fe5ea5e4e9e853c8055640fe136d8f52bfea5c91db7acc21c2caa1664885f32" name="slurm_20_02" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec469a2ad8fcec918a080b1c4310c890cce401c2d5e6da70c77bd50f21d3a960" name="slurm_20_02-auth-none" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="49ab08de3dd1a7490f63e6359c872fe1ae9f5f6b3704393227b5c9fb35276a1c" name="slurm_20_02-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d384b60f9d9796b0b8336843df60222f7b9682530d8ef48bb4ff141673d447de" name="slurm_20_02-auth-none" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="fb0b86aa1c582fc9c4f8f259b1d99afa2ea73e466a987a399abd171dba8307c4" name="slurm_20_02-auth-none" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a638f6570308de379a0bc49b905a03b660440491a18fb6bb7a7494e25b0c7a6f" name="slurm_20_02-config" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1dad9e7a6ec02553d328ec3b0276cab425bddae9f3e8e2159d7f75131a0a7333" name="slurm_20_02-config" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="65e6dd03b7d477be9bd146417e7e1696bd002983f4e36559032fa193811bce73" name="slurm_20_02-config" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="95bf1b1b73222b9daf11a18c9e8703bc804c4b1d3b0e223c6bebd378b306f20a" name="slurm_20_02-config" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ddf9235a18b66be2771e01677283730336ef8d52028cc92b8cb13ae0c6beef07" name="slurm_20_02-config-man" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="732478b646fdb6bca3359b10e0cfc8c8065eb319ec2e5ef629f6912c27178805" name="slurm_20_02-config-man" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ec5502127b680f5d94d011c968e5114864cca20bfdb2c3a2053ee93eb451d05e" name="slurm_20_02-config-man" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b33754b4106ed8b856c57f196413179ce799729406b100b933d2bcba62591f5c" name="slurm_20_02-config-man" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e671940f10b564f6da302f2e2afa6ef07fe89770d98685a1587cc7cec5d30a42" name="slurm_20_02-cray" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a6233965ef377342f887e26bcebf2b65270f4ef73be371e4651aadf4012980e5" name="slurm_20_02-cray" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b308317eff80579fd0077fc472d37becc49e1c06d316803f2a9a74d26ad10d68" name="slurm_20_02-cray" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="34b32afcd4f941e20dbf736086a9363e3f8d8d20098ef4f1fa21afbe7aa4b7b5" name="slurm_20_02-cray" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="062accb721b368289dc705da3b7b04fa38af16096f5b787821c49c8db9455b2f" name="slurm_20_02-devel" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="8f23ce26c6cd900d7cd3e384d80680806e595340d720f3e82e4f10e2c8f420ec" name="slurm_20_02-devel" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9c7f7c33153028c3da289ae6e8078d725c593d3fbb522a811909b7a63e79a685" name="slurm_20_02-devel" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ddeb990688d13ed85314d27db72c0d15a1e4c98761848730d9becded35214157" name="slurm_20_02-devel" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7add2e31c2265c7d599ace7ed1de0b409f23483d8d5b2e99fb920a3fc14e3686" name="slurm_20_02-doc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="1553874eab4b6834a43802a2e05b406a6b0ed60e12ce8c7e0b806044db6c1b1f" name="slurm_20_02-doc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="231c9b3f61c35d95a51a364f847956e61d294ff78899ab718bc3194dd207e734" name="slurm_20_02-doc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c34ae2d82dcf2138668ccedf045471b98c5f39563297787de6c3461b3545e6bd" name="slurm_20_02-doc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ca13a0d373ce4b8eaededaabef3745aea4d2dd2734f8e20095e24dba6f1013d3" name="slurm_20_02-hdf5" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="78d8c55f6e0d0ad9f517ec8382947d1c460fc259ed1fdc98166036ae423bc501" name="slurm_20_02-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a3f81038b4350e5f2eb688288c08038025f3ac880f6b27085b4abdcde5e27244" name="slurm_20_02-hdf5" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="032b9959cdecfc9ce287f19165e2ce339654c6be94ab69b52f0c39b34fe563a6" name="slurm_20_02-hdf5" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="dc8ae358c091104941e7572ab172d6f901f92a9390b67e45c6f628161de632cd" name="slurm_20_02-lua" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0f79ce7e98afe78e83ab4139de6c009ecd5ff50baef326c69b78649759f4164a" name="slurm_20_02-lua" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7e980ac2339c8ae56416863be35aa859f7193aad89266824d71be3458d9f416b" name="slurm_20_02-lua" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="70ebad9527bc64ca2c59e1c324be1c47917a8b7b65c98e5acd53eb6b2b391540" name="slurm_20_02-lua" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="54c25b691ddf7a7955f5d28bb7995ca9516b54f64286eb54706357b0ed62ec67" name="slurm_20_02-munge" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="7cc8cccb3f1113803454bb7e608cd8150e2e684419c3214e5e1bc41e91aadae6" name="slurm_20_02-munge" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="97944752afb1a6e27dea9c0546d665ca53e697c7ae6410dcd286bfe172a81c6e" name="slurm_20_02-munge" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3f9a3bf04fe5eef647f83184e20bee17fccbb5e3ce883f697cefd9136adc6318" name="slurm_20_02-munge" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6d5fa93db21a4f42317058601d4c4b016e08f0d600b7e7a0a475e85ac61840d7" name="slurm_20_02-node" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="07aa327e9580dbed461cd564581e5898c2770668afb9fd764694b8e4cc78cdfc" name="slurm_20_02-node" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="005b84fa53391d19654fd40a248989f37ccb76037fbe82f3bc57632cfffd6920" name="slurm_20_02-node" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="48b736713c2e054cb039431b723cfa8f8303d6f5834e27abad1dd7676d2c4678" name="slurm_20_02-node" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="390f4d4bb416b9e300930fca3e6ac845b587e01f4e4b17df366d2d36cf86c4c9" name="slurm_20_02-openlava" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="15762f376e3921d3120354659e04e4083050ac4cdfb649bd3deba6d810658516" name="slurm_20_02-openlava" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="6a575949a6ca33f8da05305d30b92e9f76859e82a5fb72871687d258a8522370" name="slurm_20_02-openlava" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="023c4dca3ff7b30dd8039abe870a372d69bf9497bee40a35d56a7ca1353ce77b" name="slurm_20_02-openlava" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4b9b61748ddebe8ffb04d3d0a3c667c940dfc91a67b0e0d08bb5ffb9a5f275b1" name="slurm_20_02-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="56c5b3814ea6066edc51aff6bd47b919f5f0257ca3e75684e48cb79019bff30b" name="slurm_20_02-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="cc231f93e815ac664d916c0bdb34e1aa3ae674d0ee880a8d0d5650bbbbeee9fd" name="slurm_20_02-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="906a45be6692d491026e25d4caf705ebe5565d6b820f191368a5abd8859d85ae" name="slurm_20_02-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="200d4f294d7f23b35a53ec699e942c49ba4f71c4fceff3b7315dc00a3432c0fa" name="slurm_20_02-plugins" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9044af3e86821c7513eb681225825af2a76236d163801ac7030b700a14ff0136" name="slurm_20_02-plugins" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="507d672b4c2c1831210d7fe1cafc01740533fc17ff346789e88c9170be2c629d" name="slurm_20_02-plugins" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="a26dcd0bd3c8baab588375da70df74a268feaa878e4c3782a0097eb72b152857" name="slurm_20_02-plugins" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="415f1f1fef4d071d7dee8cfbd7338f8cfe18646cf681d191cdc975f573b2e61b" name="slurm_20_02-rest" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="9a510391db7873ef2c2487e2eda0d3b8ea26397d7174a510346fbf2f4fed8f36" name="slurm_20_02-rest" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="ab2a4995f100a46736119bf96da1834e7df94878feb68babacc04e04ba3a579b" name="slurm_20_02-rest" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="4c1348182efc405130023fe7708e77fcad6f3a3f9077fa2c0b76a43cb04f3658" name="slurm_20_02-rest" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d1435bee5f4dd47e6f69b5741c8ba7fc7b535948fd84b101fb4b5a361d8b0909" name="slurm_20_02-seff" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="72f01febddd63278fdae43a9425d5c17eb5f85bbe84afbfa99d594d4da164a94" name="slurm_20_02-seff" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="14615ce16ba0b8bd3859551f4ea49c7f890cce81c5edaa0a06f08168bae28b62" name="slurm_20_02-seff" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="63e8dadc640ff57abbcb3c24f3c81aea93b7bf200ad2a4083bc4143bf240888f" name="slurm_20_02-seff" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="afe2e4dc33d45ac7c6389c33ec617c5957d4b6f4b19e5946cec13c117edf807f" name="slurm_20_02-sjstat" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bdf7181405c505dcd0b287d90a64a5722401f3f625bfff363cecc9bd51b66cd5" name="slurm_20_02-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="3dffcb70cdfaec9ed8a9ede735cc9025314a517ecb48d7341969017e8a0d464c" name="slurm_20_02-sjstat" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d037ab9a4d6764fb27867e5e67bd9db23b9a0012212a2d273f2705447757e681" name="slurm_20_02-sjstat" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="670706d36ce1b4d424f26115a15026b172bab19cedae59a2f8b15552bb2be506" name="slurm_20_02-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c162d7acf34aa4ccf3a310d1cd5359488c226d8b047b687898a5b9fb64c82a40" name="slurm_20_02-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c894157268be835e30987c6d83e7cf256c3cbfb47ca4e6c32f18520cdaa612bc" name="slurm_20_02-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f3cd583c8bc2182cec5e69861fbe28d4de8df225976a6cd27ff17afce64ffa6d" name="slurm_20_02-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="23716f5d8b97ef7765e18d8edf6938b49e9a2a213f80fa0e9aad7c56bbc6440c" name="slurm_20_02-sql" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="778701998889343be5a67304be00f311b9d196b973cce594d440d072a6198d03" name="slurm_20_02-sql" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="59ad2d93380978c0bbb9a5f356ab9e55538b0e7ccf3059d28e09bac98ae8b9f5" name="slurm_20_02-sql" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="d06fb9b1798e20aa65d3fb2045549dc147bd3b4b58439f5e85d73df983459e5a" name="slurm_20_02-sql" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="abe00a2b2b6545dcdd5b9cfe686bfffa71ebbf037f98dfe3eea807dcd393a40c" name="slurm_20_02-sview" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="41ae2edc827db91a129adb89e3114ae4d8ae486d473b8cb1fce3fcf2255b1332" name="slurm_20_02-sview" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0312525b4c35b602ee1707dfae7dadd22d6e00c10aa502b355ea84915cdc7120" name="slurm_20_02-sview" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="782147ca290d689e56c30313a608918fe871caf4804711798c745874fa09ecbf" name="slurm_20_02-sview" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="822a67e7db8750899e73bd89888483b0007d7daa607e7abe38fa65890b023c98" name="slurm_20_02-torque" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="98968d2e096c7742f4774a0ac4ae8cc106538ebe63641eab0c65aac5e015cf23" name="slurm_20_02-torque" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="bcf97d8e5057a2c8b261106ac0ed1f637f82ec8e3b5dac607400e7f8997d2fca" name="slurm_20_02-torque" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="b3611fe568a24b2be220964b1857ca0ceb20186b0cda30afdc3a9ef6605ac234" name="slurm_20_02-torque" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="f74cdbf52394b67e5fc4fd51323b1bb3852794a43c936c306cc9dcc0614ddae2" name="slurm_20_02-webdoc" arch="aarch64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="e7ce7fbe15dc3f3bc80064cb02319f75b53d1e61260ba4eb84375fd98dc606b0" name="slurm_20_02-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="c76909b35232b3c91b3b7210f78ce3c5b0d77b243584ee595cfbb2a112e39612" name="slurm_20_02-webdoc" arch="s390x">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="866f38af077e582f91eff367df98eb7d16cf4d4903f798782e6c03519d77b3e0" name="slurm_20_02-webdoc" arch="x86_64">
  <version epoch="0" ver="20.02.7" rel="3.19.1"/>
  <changelog author="cgoll@suse.com" date="1583323200">- slurm-plugins will now also require pmix not only libpmix
  (bsc#1164326)</changelog>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- upated to 20.02.7 which fixes CVE-2021-31215 (bsc#1186024):
  * cons_tres - Fix DefCpuPerGPU
  * Fix false positive oom-kill events on extern step termination when
  jobacct_gather/cgroup configured.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
    prepending SPANK_ to all user-set environment variables. CVE-2021-31215.</changelog>
</package>
<package pkgid="0c0defc09dd13f36fe64efd6921387e61d19a09aee117d48fd701c3a62341cf6" name="slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b138cc0612392f0da9c73c2dd83ffc0acc43da7ed05b07807bbceaca8bbf7ddf" name="slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="74503e2112922eafc8f1d44a834094f0603ce4fd7497e925b70679c8b200af2a" name="slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="878f98fbaa1d7d1c2871d5374ccff75983dad741a54e920e4cf98f4c00205d8b" name="slurm_20_11" arch="src">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="986bfd17d6bafa5244b00d927eec9899c3b1945e74397155832c27a3a9292934" name="slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="298b9997b302baf914f8e22cd97d0556d3657fd61c435fe880a6d0e13acf9da5" name="slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="51fdbe445235785d02981f46ec15eb97366f6130cf3d620d32d8c94fa9860636" name="slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="943e62d7716ba7090186b55934cd522a2e40e537a85bd870cf21240a8c727088" name="slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a753a03df1ada8b4c653d99678f38f1685307d527a4be6fea3eb65233dbc8c19" name="slurm_20_11" arch="src">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="957ac698abf01e8828352eab52fe29400c175bba90b85b52ed6ec70d3d10df4d" name="slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7552e1887971dccf04d291ec5abd805e7cd84328269463eb2e1f8af2937f0dff" name="slurm_20_11-auth-none" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ebc4c4e3a2474d27a9a79d6e2306b327ce2ffeca1f5209be0829601ffb81a6e4" name="slurm_20_11-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5ae7bc0dce27d6d56dd5a391fa93c66ae9f628a4bec57c3b02a502b323ffc39e" name="slurm_20_11-auth-none" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b562fd38a1f5de29e444391111a4e82d888e1de13f386744cac86eb3569db15b" name="slurm_20_11-auth-none" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="91ce2012445e5ceaa78ba1f3b4398bdb38f4afef3c2b2519b241d1bcd00ef07e" name="slurm_20_11-auth-none" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="797dc5f250bfa10d924a1edcceb9addeff298cb45b138d2f5cac69ea75e0aec8" name="slurm_20_11-auth-none" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="fcd74c5887df5839e8678d05b38684d0b12c6ce85dbe228ff128fe93fe04e844" name="slurm_20_11-auth-none" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0c89b48d4ee48edb157c9f057ea80653d6aff8d228ef0f4e0ce4441188bfb875" name="slurm_20_11-auth-none" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="22eb86d9eca4e1af313c3107ef8c1fccf1f31d3844e60a974dfb1b71ab17ad15" name="slurm_20_11-config" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d6384cb1e1b2047e099312b7016113c1868c1d4d7dfb9da996f4bff49c5b0495" name="slurm_20_11-config" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ca4957a4bc153a3d368a0b3ecef05931e723c5cf7256fe2f9aa759179049da11" name="slurm_20_11-config" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a816718ca92b64dfe4022fe5a382417999a2b5c005265cc46e4135bec25d54dd" name="slurm_20_11-config" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8e6103f4dfc2910e8d41272f7bd1b6bbc51f9d6f02d7c05e661626ed0247b5f2" name="slurm_20_11-config" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c7f66840ef5dca04eeccf4b199dbe9a118e88ed911acf4768176bdfef0e0c50c" name="slurm_20_11-config" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ea0f58874b723cc191e0e5011d9f9e86518a645a6eaf88cc444710a700848660" name="slurm_20_11-config" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="243c80a25a5215b911c2c650f641870107da1ecdf0fa37a722eb6f43bdd0d7e8" name="slurm_20_11-config" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="05b7bcb811c93a4a19a6ade6fc999e127655e5eafd31affd68148a67db37e38c" name="slurm_20_11-config-man" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8d46fa6d02a044d170351f221a663c664fb7f6a6a0c37c0d2ddb043f51670ef6" name="slurm_20_11-config-man" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="98ab496e69aff1417e61c9ffc337b068dfd909de6cc333f67296f79ad4dc3ef8" name="slurm_20_11-config-man" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="31275cd0a165fd1ceacdad57bb0de9b324b89e5105c6654b2e1f2a203577ac77" name="slurm_20_11-config-man" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a0eef1065344aea9e0f921c2dc0f73750e4f970f4c37fc22a5be23a549311094" name="slurm_20_11-config-man" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0166d99b8c2d8bfff66f21cc78e4e2479159914ead77387ac2285f8a2d1051f1" name="slurm_20_11-config-man" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="dd0311ce6af39cee9fffb86ec9e96008286bfda5ed9b600dad5668c9ac71eb8a" name="slurm_20_11-config-man" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="af3bd38136dd49f1290436db0f4ca0de3fa5831f875666597e4717cadd01c347" name="slurm_20_11-config-man" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="45c602a725266045ebc9a002e5b7e9e37da42815f53abb167d0e05f1416b90c3" name="slurm_20_11-cray" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="170dcb0906f49297bc57c5dd2b08812742ac2140af3dbe5639f1e6398b9eac16" name="slurm_20_11-cray" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2ab5d00549cac6c19b21270e8eaeb88c200e70114689cd27041b305f9918df2e" name="slurm_20_11-cray" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="ffe1228717bfdd3c14ac1f633aa6d4248539917e5a7d63fe810ef1a14a736d88" name="slurm_20_11-cray" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="07270b8a4a73ba2ce1d5757937e8e7920ce3bffd8eb2393fb411819f22bd2d60" name="slurm_20_11-cray" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1c592739e747b78c15db9072e7c9fcc6dbaa2b2ac651b58ff3fddb2fb432de91" name="slurm_20_11-cray" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d54407e6332000557cfb264d8c9df8c7040949a7a9181a3d8177049786218839" name="slurm_20_11-cray" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7cf2c632170974a763274177779c4e2fd148c0a1208fbecf9bf03a7cd81bda3e" name="slurm_20_11-cray" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3208c2041361fb7a71c516b8476a08ec6d5aee5f9b54668ce87097f0b14b847e" name="slurm_20_11-devel" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="4f7c92245600e0eeb50980eb42db9c62d37331b7218c108bb882c1a38cf61834" name="slurm_20_11-devel" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="63b0471b7c69c02230acdc392db9c84004bcca6dc081649514bb2de76dac549b" name="slurm_20_11-devel" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f3544cd7fefb4e1bea1d11aab49b640bf8903f52daecc406a9d1e8d2df954dac" name="slurm_20_11-devel" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7e6fdf4e0a19e1815fb24022fbc3bfbc7f5baa0107c03934422327d242c39546" name="slurm_20_11-devel" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7a55835ffa8906e2db08caf7846a1f116ec697683cd5b347ee645cb7c987d7f7" name="slurm_20_11-devel" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3c8500f2f25332fa8dd3cb31146dc1a89d3b87660268f4e83d01662b5ae5fbf7" name="slurm_20_11-devel" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a0a6bce650b1f8c790da1477e791486e143082071a51a13b376150e378c86e1b" name="slurm_20_11-devel" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f0054fb63bd6be88dc297525053f992171e58c2bc9803804950eb41f2d6879b2" name="slurm_20_11-doc" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b0784e548b3a3494e094fa088abedf88c4ca26b409014217a6c8d519c7a830e8" name="slurm_20_11-doc" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="845ec2e1a0fd257d96f176c7f9af97bc4170e9d14a89f2c2ec2ed029c3f57c2b" name="slurm_20_11-doc" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="63bd18e097350cff3bf17b7099e94c8c92b54cefbd832576254c6849231b7c19" name="slurm_20_11-doc" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="6d32db20ee72bdcdef597ec0a5f67ecad336aa50858f552a9c96c57f6aef0ee6" name="slurm_20_11-doc" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="773c1c1bbcc998e8382c888c5342d6e8fa28ab70f1515ca0417f8b78a6fd63bb" name="slurm_20_11-doc" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7acdb9d40b23dde294f5364b895515f24f504b9bc49f0436acc21f0c39302a73" name="slurm_20_11-doc" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="09a628d21f576aa3e07f176241574d2ff15a21538adf2b205d0523c8427df7bc" name="slurm_20_11-doc" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1b55475d2f243ddf748608399cf54097ad3e0b26889541b8370afb067d08951f" name="slurm_20_11-hdf5" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c890f72c44ee5007a14c27f1c5fba25100bfec7d1b076f848f1e5ca257e0b399" name="slurm_20_11-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7758ed72d7541fea5f0c8d8c8f3af7d7c1349d13849eedc098de587e39a5cea3" name="slurm_20_11-hdf5" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cd6c6f17d5b266dcfed8588a54437cbc2f4ea11441781e297555b6f8dd96810f" name="slurm_20_11-hdf5" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d3f147a73c2923e6dc612668073ceff0c659a75fef2425154c40329165889310" name="slurm_20_11-hdf5" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ee966c4f899596e4346cf005a4e541455b8485145eac5444b9dd45af228b222a" name="slurm_20_11-hdf5" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3fa94785361aafd7bc09145a944c1d2e4a0e4e87faa3ccf161f4cb86692dd283" name="slurm_20_11-hdf5" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="4e507bff13aaf4c6c353e47c71418c8f92905fe3a97a127d12e268c9cfb51fa9" name="slurm_20_11-hdf5" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="6e274a1743b2a5c2027641f48dc63ff5c13022ba2e8c019715d3be11e91744db" name="slurm_20_11-lua" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d602fc393836354bfd9670baa2c086cdcc4dbde0b45aeaf80ba85e57295fdced" name="slurm_20_11-lua" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="237b8c9e7d26bc5f7b6c59b1c3ede62dba4007d693925f181f65db029fe968e5" name="slurm_20_11-lua" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2037f9db53e485119a45b291df8b7bb5a014ce54014409b2b7487e714181296e" name="slurm_20_11-lua" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="124797e6b5a34346233faadb787f489a09333be9a76dfc32be69c61a006182eb" name="slurm_20_11-lua" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="dc48e05fa1b663f6c2602f2e50b14ccdc2b0f1950385ab7cef0f9e8295c14300" name="slurm_20_11-lua" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="4198d34d6b93e680ec0f6a87064793a15d619a87d9de7cd8d07cc0add1062a22" name="slurm_20_11-lua" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="27e3c8270547296db2e14fb30de1d0a965a048a328fe3803b07f54508d42a6bf" name="slurm_20_11-lua" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="98f1e46e9480f7d2ce7ae2deab88e39c773b9fb1e5e2da00f93c4ff779db64d9" name="slurm_20_11-munge" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="37d7f0ab73633d524f9b51126834788ba923c06a233cdefb10ab7f4ad76fc284" name="slurm_20_11-munge" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f73135bc8fa47d3f86ef94bc0cc12c195b79454f4967d9c64361a9c4352fd998" name="slurm_20_11-munge" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f317b9fa3baf5f0ef18b144c57b56c98fb83e641ffdc62953a847ff80af6b546" name="slurm_20_11-munge" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0d5fa49b85a28432ee84f8f32df61f721fe5c2637ff8c37e0eac0fff5049e61f" name="slurm_20_11-munge" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d78842f52bbfcf17f2566e1d9b450240b03d0e275e5f76b42502d432ab250ab5" name="slurm_20_11-munge" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="859bacdf7520a8c75b1ae77c4a01418b7a58811cdb8435ffaaa158fe36fa4a92" name="slurm_20_11-munge" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c6a7b3a269a6b8c9919b13e26a72891b117f25f70bae326652dab9d2512b1b06" name="slurm_20_11-munge" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7bfa5c558ec1ca216130e02d4332a543cce010519f045a9b245debcb2c4e16ec" name="slurm_20_11-node" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="4a715cb81a416210d6a0f9c735143bf6ad707744dc8918389281129b303fac0c" name="slurm_20_11-node" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0effd4d502e99c4acd9bf92a11e5f3276dd59e16f9f385e08905156481617337" name="slurm_20_11-node" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cde843748323d4adebd9e8bf072dbf2f29497d8c8dc3d4bb990539030ce7eacd" name="slurm_20_11-node" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3d4d86cf0b684dc067479637b314aea261547f795a0ab6060c1e6a63b5ed89a2" name="slurm_20_11-node" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="93232fc4c9a1124393f28133c99fc90086d35b9cc157c1aa35c8b4dc04653292" name="slurm_20_11-node" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="7f0a0ea1f133b6f78dfd46765d8a46b330593d35b9a876373d7efd8b7398b462" name="slurm_20_11-node" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="99820fa4f331e19312027b3638cd2e19af847214224757e8fd19f29d3e361b50" name="slurm_20_11-node" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="38d8a719470d4f2aaa9d7dc676d4d769b83bd27d5a4df8e4c3b872464216fa0d" name="slurm_20_11-openlava" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="baae0e4230bfbf893827c3e1aa8e13121a6ab4d6e4ede0f984891aae331f7e33" name="slurm_20_11-openlava" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="39f620e24c10d403b69bd2bf17353f1ebba193e510a33e82b719ca201a331723" name="slurm_20_11-openlava" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="d0236c234c33ad63a7dd1572aae15e8e6d6fb4a9ba1b9de3142fd53c2f55b6c1" name="slurm_20_11-openlava" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="919f62710a44c39db9a05b455286fdf54af7ebfdd410bd52d2d4dc025e90156d" name="slurm_20_11-openlava" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="bf6decfc6081337470506d8a701414b877d92c7f71776fb8e1f280420e1e7960" name="slurm_20_11-openlava" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a8d788b931c702add1668e7ba03a1b0c96fb417847e095727874740a313b54d4" name="slurm_20_11-openlava" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="72fb45e4bc3a05c459edf6943f655cf7794a0f734394835a8e4ece966280e2ab" name="slurm_20_11-openlava" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3fdbac230d8375ff581ffd8aa6beb88b7c6354dd17b5d453d78b7eb54ca509dd" name="slurm_20_11-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="156b6e41ce9a7718b364fcd379ce4f6f1d65e20bad2424f29d7e735b1f7acd81" name="slurm_20_11-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="37428d850c7a357a076686b881d6676d1435bace44104f8e4944017a4dc5f0af" name="slurm_20_11-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0507177efa40316a1e7e8c921167df1e0768d20d8745c5641334cf8d699c4493" name="slurm_20_11-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="0b1c8a228cb140f188fad5690b0e435115cd59f5b47c98d9b978524510f688bd" name="slurm_20_11-pam_slurm" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0594f4d7e34abc4c870606ed248d979784d8876539ab8876af9a109382ccf147" name="slurm_20_11-pam_slurm" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="597e5d5d98c1f77675290b5f5f3d76194c6e6da5a648b6e2d95b6852ac411571" name="slurm_20_11-pam_slurm" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d7a3604149e5e00f8d741d735f2fd319da94afa53dd85e5a3c5acd728f4fb912" name="slurm_20_11-pam_slurm" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1d3c8bb8775d092abb94821ca7030722d33b64d29bd932d4d9c3ea234d5e0775" name="slurm_20_11-plugins" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="5e66c75723a53e66f2b00c5505c35d392b532955320ff5bb59320d5f3c172a18" name="slurm_20_11-plugins" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="973d1f59746d6d2997b9be931ff0a0ae356970cb0a9ac563d274ff5bf903be5d" name="slurm_20_11-plugins" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="768af9ec79e8139d58e450b4ece795a36f35d3511d98fad8d48f172a8152cd86" name="slurm_20_11-plugins" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3a35707277f7a32f4db5004d207e6fbe2ec2fa2ae9e0c3262dec5f71dfe90f4c" name="slurm_20_11-plugins" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="eb9ea574e408a441792eaf08d317ae67a8c1d927e8fc2391b8315af5c54a52aa" name="slurm_20_11-plugins" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="d7f6842a91348c0647ee8bbec18572b87630671abbb2763dceec675b3cadb07b" name="slurm_20_11-plugins" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="357316e20f0f2c654af4a4a8e4175219462c306fdce2c4501d0415e928ad5b8c" name="slurm_20_11-plugins" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f1136cc5e345d45131d4d3ea8210e2df460f97a61da5ca1f40a6a3e668df1bdc" name="slurm_20_11-rest" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="3e00132653cfe548f87100ec118389223549f546f43559234455c3ca5d562519" name="slurm_20_11-rest" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="624fc0a16b6b90b444316b9dc26bdb57c51d4bc81385d27526d0a790fc2f4015" name="slurm_20_11-rest" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="a4c195c44d05b121895648e66b3c7c3c8e6083de03cac95c4bfd13646f65b79b" name="slurm_20_11-rest" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="802c55934f41314d693719ed2bee1bd9b306fa4a36cf8811cfadf5061599e889" name="slurm_20_11-rest" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1f1f8394c045e1ea84a7cd8ae0111c7b8be3195986a4f4054ab74c800ae403e8" name="slurm_20_11-rest" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="39c1c31777a53079d7c4d647e52f8907710b0c83818364d0866147a0b6106d88" name="slurm_20_11-rest" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ac8de1e177152dc195bd819ad95724fafa772f47f7f9d2fcd036543d1f8c5390" name="slurm_20_11-rest" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="6fe832af7d8e0c95a8129003b14981465bcd137b81ceae50fcaf61cceefdf7d8" name="slurm_20_11-seff" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="45a78e6c49eb10459106841477acc4714610712a0131b767390b4b48fd4408a3" name="slurm_20_11-seff" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="048ac6ee8c707d9e2f7fc898a821557602dc894405bfe4a35e7217dd993df5b4" name="slurm_20_11-seff" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e39393d7c4bc6bb22ed223a604d3c91d54c1c11d06c6d78c0abca28594a760ae" name="slurm_20_11-seff" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="76f42427fcc683031b7604a67c5fbb36c22e166e70634b1983d5508e12312cdb" name="slurm_20_11-seff" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="72da0f3fe295ff3350c839c3f65b34803490a5116c6f5e6c2e713b533bd3d484" name="slurm_20_11-seff" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="09aa46a22da7fedfb6b1bee61db6915257fa0504cb3772d02b8ed6fc3a7752e7" name="slurm_20_11-seff" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="5bb189e0ac04f57cb62da5509ae1a8dccf058ab9a6f00c4f70f3e7018c09bc21" name="slurm_20_11-seff" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="bf52664d239119ddda2b7b806a8f3c3c5779422ee6140da789b4c7bbee2732ef" name="slurm_20_11-sjstat" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="82a513db5dd35348ec7761b5f7be00eee22a99eb3d571985284be7dcaacde0a5" name="slurm_20_11-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8635cf51a428e6184748c064f80fccb701fa47a19f88dd5d06fb225df78ffb3f" name="slurm_20_11-sjstat" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="500d0771769742d81d85d22dbb3df2642ba5f7faa7b32d207fe4b7901d691538" name="slurm_20_11-sjstat" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="f40d24deaf70e1c09bd3344dd0e7620c235399ce41d4732bd25aeae1034702b6" name="slurm_20_11-sjstat" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8363ed0eb04f448e17a321a7f4973dfb5bf10f7178f75812fb6df95a6a426419" name="slurm_20_11-sjstat" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3e55024dfde064c78376258b24961a186d09d9bc0d4fd00c7173dab2f2b9c06d" name="slurm_20_11-sjstat" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="5a91db27fde4de91640e892e1123dcf2b2eed861f6d132688bd0dded118054d6" name="slurm_20_11-sjstat" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="b88b8ad6bc7a501c67a90bb99bd939d88786da991c387174a6b06d9e9802d6f0" name="slurm_20_11-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="7a499db833b93da58d89b186aa0001a68a291c544064143419e7171c78bc999b" name="slurm_20_11-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2ef0295e1aa89ce172b71520275edc70fab3ad4a6f2f0c6f87432fb7da4c5674" name="slurm_20_11-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="b99fa8cbb260a8e94b89420f20c7fc090099b35ed693ab6a88ae743efbecf687" name="slurm_20_11-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="eac2f62bf9518945985984c47803ec6b123f5fb957802e629fe9eabc6f004962" name="slurm_20_11-slurmdbd" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e51e48b65c48cd2232a735a845f4f6d957235f90eff14e7640150ff28f1a8c1d" name="slurm_20_11-slurmdbd" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3dd2d6591fc3432ca8d3dc689a62e099b0dac686b59e756ff6bc89eeec979222" name="slurm_20_11-slurmdbd" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="a74a39ae79d198a9ba630d0d2fbcd0388522f18f08418e63bd516c7e1415d4ea" name="slurm_20_11-slurmdbd" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="ca7b3a6f097732a9dc557162d7957405773c4aae9b0757a4cb49c026cc0a5b47" name="slurm_20_11-sql" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="44b9008f71e45369284987415c2b468dc72c4dde57bdd3e19e91a84f7580bb57" name="slurm_20_11-sql" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c1bbe65774dd3fc11f3a28294d3df2db71608bcb1df7cf4992e94ac8e87748ca" name="slurm_20_11-sql" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8ea1be9bd9ca9f1831f6020a3cf3626eaa9a0956ce79939faeb5ecd1d8805240" name="slurm_20_11-sql" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="6e7fbf93713544aad20a01ba349bb0bc8ff4a36f97faea5bbe5244344882de84" name="slurm_20_11-sql" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="e13fd6b0affdb1363ac6582c3991e2a3f0ddaa172d1670fc08f103cf48390e8e" name="slurm_20_11-sql" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="53149ee57a818d2d2534c56ab31273940b4321b8cee78df3f62f49e65615ea43" name="slurm_20_11-sql" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="82ddae8670026b3152a8167f30714af3c5de2cc858884b899d47815a30fc9a8a" name="slurm_20_11-sql" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="8e5525c61e6e1892cc4605a76675593fa7fafae3448de2a0d967861ffc40d87c" name="slurm_20_11-sview" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2783f71d3cb8e735bd5abaa7bec0dbcb912e97376a81002e64c9139d2788061d" name="slurm_20_11-sview" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="fdeb9053058bcadc5710f26db31162b9450f74c500330b2cbb358c04cbe8ebb5" name="slurm_20_11-sview" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="8c64492ea4e0c238561c9619919ca3443496db9b5ed16c1d6f7596c76ba20e30" name="slurm_20_11-sview" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="bb1e7b597ad1932751e00661e23fc311536cbe4b443b7d9e8a70031e5eff99de" name="slurm_20_11-sview" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="39c25df1a1cee9494e74bc45eeabbe63daaaac9b245651eb0d79247e11c8a0ab" name="slurm_20_11-sview" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c376da8e148cd0d5e0e91c224cbca1b0f97476abeafcffa8ee3a46e590920e16" name="slurm_20_11-sview" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="0c0e3c5fa154cfeb9b90c9f2826f13d5177ae4ce5e5f9456f2aa7ac47b6b5953" name="slurm_20_11-sview" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="9723c111bee0c74871c95ccb7e48b032b9bafa4ca1a266c5b9f7ff7fbdc40a37" name="slurm_20_11-torque" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="fea08193416f295b29d1a246ab006d843677bf8eeb18f77ba94cc6f7be08eeca" name="slurm_20_11-torque" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="e959ef241e03720139ebf5a9d1897bfc0f80b2c80f464d9564610aa6f7c801ea" name="slurm_20_11-torque" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="bb189ecaf5b1e15451bacd25dc90e36bfcf5a54f14b153e0729ef13b25d96f9e" name="slurm_20_11-torque" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1bcffab1e4e4ce467e52397a1d335cb88da29ab286acd74a970859eb1561e136" name="slurm_20_11-torque" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="3e067c292ca1a76b7fac584baf40dfe20061affe388d4491d9a45bd906c82c2a" name="slurm_20_11-torque" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="77a52a285ec45b86a2fcda5aa1ea0567c185197d4a511a23de8b75a8c8fd7860" name="slurm_20_11-torque" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="496567fd91218dd5fbc499a76c54e70f8cdfef3b5a53ffef6c652a28a9838115" name="slurm_20_11-torque" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="12e499ea3d36d35947334f485265dca6f1e92be01e8b955cc370252f0075e23e" name="slurm_20_11-webdoc" arch="aarch64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="c7014e7aa671e2a87f74a1b25e986c1245a05d908a683fe218aac46b2c70f0ef" name="slurm_20_11-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="cb6e23e07891e6bb8fcaeb9099dfcdfd46d4f1131fbb9e2148861149d3c19682" name="slurm_20_11-webdoc" arch="s390x">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="2736a07401a1c05362b750d66fabfaffc94bccc978c29607d0ab66078876953a" name="slurm_20_11-webdoc" arch="x86_64">
  <version epoch="0" ver="20.11.4" rel="6.2.2"/>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm.</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
</package>
<package pkgid="1f75a766dcc255ed940b06e894f10d4ce543df68666a555717941a42f6276771" name="slurm_20_11-webdoc" arch="aarch64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="c4082bda96734f57cf11678c063e9aa457fe5ce0b8447704d14f616975921ab8" name="slurm_20_11-webdoc" arch="ppc64le">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="1607ce8fac8fcebeea009c88c66ca041cadd8605f9c46ae663cdd4c01c8815af" name="slurm_20_11-webdoc" arch="s390x">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="f1a3efb6b7f51fd23c56eaae19e62645c99877b90f09c6083c9a841d95798863" name="slurm_20_11-webdoc" arch="x86_64">
  <version epoch="0" ver="20.11.7" rel="3.11.1"/>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
</package>
<package pkgid="387d76c2b9f0d92b31780175087895ff63f412b4099dfa4f5eceebb4633110b1" name="snakeyaml" arch="noarch">
  <version epoch="0" ver="1.28" rel="3.5.1"/>
  <changelog author="bmaryniuk@suse.com" date="1314360000">- Initial build with a bootstrap binaries.</changelog>
  <changelog author="bmaryniuk@suse.com" date="1314360001">- Removed bootstrap binaries.</changelog>
  <changelog author="ro@suse.de" date="1321617600">- explicitly add java-devel to buildrequires</changelog>
  <changelog author="mseidl@suse.de" date="1404216000">- modified for sle12</changelog>
  <changelog author="jgonzalez@suse.com" date="1509624000">- Fix build with java9
- Add:
  * snakeyaml-1.10-jdk9.patch</changelog>
  <changelog author="fstrba@suse.com" date="1551441600">- Packaging of snakeyaml 1.17 based on Fedora package
- Generated and customized ant build file
- Removed patch:
  * snakeyaml-1.10-jdk9.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1573387200">- Upgrade to upstream release 1.25
- Removed patch:
  * 0001-Replace-bundled-base64-implementation.patch
    + replaced by other implementation
- Modified patch:
  * 0002-Replace-bundled-gdata-java-client-classes-with-commo.patch
    + Rediff to changed context
- Added patches:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
    + Replace with internal jdk8+ implementation
  * 0003-fix-broken-test.patch
    + fix a broken test</changelog>
  <changelog author="fstrba@suse.com" date="1621080000">- Upgrade to upstream release 1.28
  * Fixes bsc#1159488, bsc#1186088, CVE-2017-18640
- Removed patch:
  * 0003-fix-broken-test.patch
    + not needed since integrated upstream
- Modified patch:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
  * rediff to changed context</changelog>
</package>
<package pkgid="5e2374a3f258eb55ea2e24ecfaa92a401f1029d5bef85d71ff56d026e81552d2" name="snakeyaml" arch="src">
  <version epoch="0" ver="1.28" rel="3.5.1"/>
  <changelog author="bmaryniuk@suse.com" date="1314360000">- Initial build with a bootstrap binaries.</changelog>
  <changelog author="bmaryniuk@suse.com" date="1314360001">- Removed bootstrap binaries.</changelog>
  <changelog author="ro@suse.de" date="1321617600">- explicitly add java-devel to buildrequires</changelog>
  <changelog author="mseidl@suse.de" date="1404216000">- modified for sle12</changelog>
  <changelog author="jgonzalez@suse.com" date="1509624000">- Fix build with java9
- Add:
  * snakeyaml-1.10-jdk9.patch</changelog>
  <changelog author="fstrba@suse.com" date="1551441600">- Packaging of snakeyaml 1.17 based on Fedora package
- Generated and customized ant build file
- Removed patch:
  * snakeyaml-1.10-jdk9.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1573387200">- Upgrade to upstream release 1.25
- Removed patch:
  * 0001-Replace-bundled-base64-implementation.patch
    + replaced by other implementation
- Modified patch:
  * 0002-Replace-bundled-gdata-java-client-classes-with-commo.patch
    + Rediff to changed context
- Added patches:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
    + Replace with internal jdk8+ implementation
  * 0003-fix-broken-test.patch
    + fix a broken test</changelog>
  <changelog author="fstrba@suse.com" date="1621080000">- Upgrade to upstream release 1.28
  * Fixes bsc#1159488, bsc#1186088, CVE-2017-18640
- Removed patch:
  * 0003-fix-broken-test.patch
    + not needed since integrated upstream
- Modified patch:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
  * rediff to changed context</changelog>
</package>
<package pkgid="af3829d7ccb7a00b33220d62221ac73cd1c0c715922bbd7e448e5dab11f952c0" name="snakeyaml-javadoc" arch="noarch">
  <version epoch="0" ver="1.28" rel="3.5.1"/>
  <changelog author="bmaryniuk@suse.com" date="1314360000">- Initial build with a bootstrap binaries.</changelog>
  <changelog author="bmaryniuk@suse.com" date="1314360001">- Removed bootstrap binaries.</changelog>
  <changelog author="ro@suse.de" date="1321617600">- explicitly add java-devel to buildrequires</changelog>
  <changelog author="mseidl@suse.de" date="1404216000">- modified for sle12</changelog>
  <changelog author="jgonzalez@suse.com" date="1509624000">- Fix build with java9
- Add:
  * snakeyaml-1.10-jdk9.patch</changelog>
  <changelog author="fstrba@suse.com" date="1551441600">- Packaging of snakeyaml 1.17 based on Fedora package
- Generated and customized ant build file
- Removed patch:
  * snakeyaml-1.10-jdk9.patch
    + not needed any more</changelog>
  <changelog author="fstrba@suse.com" date="1573387200">- Upgrade to upstream release 1.25
- Removed patch:
  * 0001-Replace-bundled-base64-implementation.patch
    + replaced by other implementation
- Modified patch:
  * 0002-Replace-bundled-gdata-java-client-classes-with-commo.patch
    + Rediff to changed context
- Added patches:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
    + Replace with internal jdk8+ implementation
  * 0003-fix-broken-test.patch
    + fix a broken test</changelog>
  <changelog author="fstrba@suse.com" date="1621080000">- Upgrade to upstream release 1.28
  * Fixes bsc#1159488, bsc#1186088, CVE-2017-18640
- Removed patch:
  * 0003-fix-broken-test.patch
    + not needed since integrated upstream
- Modified patch:
  * 0001-replace-bundled-base64coder-with-java.util.Base64.patch
  * rediff to changed context</changelog>
</package>
<package pkgid="203e4ccb30738c39564e98244db3c667a9f22febc62eb9306421a93663d869f6" name="snappy" arch="src">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="5c190668577af724b10e2d146fdfb4c1b354cd8304488ee3b96cf051e74f2595" name="snappy-devel" arch="aarch64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="d6053649a61e4a0cf9d74d53c33f11e9b7cc2b8e3538befc9fc9be9191bf4ccd" name="snappy-devel" arch="i586">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="3a44478ece7133afe92c4e31c6dcfdeb8bd4e52543c04ef9a1ed24a5b8425369" name="snappy-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="dabffdaf12ae8c90a95ae1dd25c74aab36f48dbd3197714ecdc7c2d8ca9904ab" name="snappy-devel" arch="s390x">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="ec1ed0e3e6c92b0f7a794ae206b4d409eb86ca7fa2a2f7acfc520b860ee116e3" name="snappy-devel" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="3.3.1"/>
  <changelog author="mvyskocil@suse.com" date="1376568000">- Update to 1.1.0 (FATE#315420)
  * Snappy now uses 64 kB block size instead of 32 kB. On average,
    this means it compresses about 3% denser (more so for some
    inputs), at the same or better speeds.
  * libsnappy no longer depends on iostream.
  * Some small performance improvements in compression on x86
    (0.5?1%).
  * Various portability fixes for ARM-based platforms, for MSVC,
    and for GNU/Hurd.
- refresh and rename random-return.patch
  * snappy-random-return.patch
- reformat spec file
- build with NDEBUG to speedup a library
- install COPYING alongside so file</changelog>
  <changelog author="cdenicolo@suse.com" date="1377172800">- license update: BSD-3-Clause
  correct license is BSD-3-Clause.</changelog>
  <changelog author="p.drouand@gmail.com" date="1384344000">- Update to version 1.1.1
  * Add support for uncompressing to iovecs (scatter I/O).
  * Speed up decompression by ~2%; much more so (~13-20%) on
    a few benchmarks on given compilers and CPUs.
  * Fix a few issues with MSVC compilation.
  * Support truncated test data in the benchmark.
- Adapt patch to upstream changes
  * snappy-random-return.patch &gt; snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 1.1.2
  - This is a maintenance release with no changes to the actual
    library source code.
  * Stop distributing benchmark data files that have unclear
    or unsuitable licensing.
  * Add support for padding chunks in the framing format.</changelog>
  <changelog author="dimstar@opensuse.org" date="1438171200">- Add baselibs.conf: build snappy1-32bit, as needed by
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="tchvatal@suse.com" date="1438171201">- Version bump to 1.1.3:
  * See the NEWS file for full details
- Switch to distribution from github
- Remove upstreamed patch:
  * snappy-1.1.1-random-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492257600">- Version bump to 1.1.4
  * Fix a 1% performance regression when snappy is used in PIE executables.
  * Improve compression performance by 5%.
  * Improve decompression performance by 20%.
- Use better download url.</changelog>
  <changelog author="tchvatal@suse.com" date="1518091200">- Version update to 1.1.7:
  * Aarch64 fixes
  * ppc speedups
  * PIE improvements
  * Switch to cmake build system
- Add patch snappy-pcfile.patch:
  * Pull 55 on upstream github, was dropped when moving to cmake
    of course we still need it
- Fix license install wrt bsc#1080040</changelog>
  <changelog author="jengelh@inai.de" date="1518091201">- Better neutrality of from description. Quantify "Core i7".
  Trim description of SRPM and -devel as the user already has an
  idea what to look for.
- Fix RPM groups.</changelog>
  <changelog author="dmueller@suse.com" date="1598356800">- update to 1.1.8:
  * Small performance improvements.
  * Removed snappy::string alias for std::string.
  * Improved CMake configuration.
- remove snappy-pcfile.patch (never went upstream)</changelog>
</package>
<package pkgid="ddbd23e20d32eeb41109f5d407424f9a51afa08551a80fd11d4cbbd3b4e637c3" name="spice" arch="src">
  <version epoch="0" ver="0.14.0" rel="4.9.1"/>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537790400">- Include spice-server tweak to compensate for Windows spice driver
  which causes performance issues. (bsc#1109044)
  Added Patch:
    ca498457-red-parse-qxl-Avoid-invalid-flag-usage.patch</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="c04d3188ce1e3fe46f92d08e2a89e013a1ed0627de8a1e537576221bb0637e85" name="spice" arch="src">
  <version epoch="0" ver="0.14.1" rel="4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="6486534bf7eb8ab28630e1cd8fd76a72790d40afeb2bcc370606ce365c5b136d" name="spice" arch="src">
  <version epoch="0" ver="0.14.2" rel="3.6.1"/>
  <changelog author="jengelh@inai.de" date="1517313600">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="brogers@suse.com" date="1537358400">- Update to v0.14.1 stable release
  The announcement email describes this release as follows:
  The main change in this release is the addition of a new protocol
  extension in order to support streaming the remote display as a
  video stream rather than going through the QXL protocol. Together
  with spice-streaming-agent, and/or with more work on the qemu/
  spice-server side, this should allow streaming of 3D accelerated
  VMs in the future. At this point, this part of spice-server is
  still a work in progress (multi-monitor support and various
  features are missing).
  * avoid performance issues on Windows 10 KVM guests (boo#1109044)
  * add new org.spice-space.stream.0 channel used for passing an
    encoded video stream from the guest to the client
  * add support for TCP_CORK to reduce the amount of packets that
    we send
  * fix CVE-2018-10873 (maintainer note: we already carried fix)
  * fix cursor related migration crash
  * fix regression causing sound recording to be muted after client
    disconnection/reconnection (introduced in 0.13.90)
  * fix regression in corner cases where images could be sent
    uncompressed when they used to be compressed with QUIC
  * disable TLS 1.0 support
  * CELT 0.5.1 support is now disabled by default. If celt051-devel
    is installed at build-time, --enable-celt051/--disable-celt051
    must be explicitly specified
  * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or
    newer is now required
  * bumped minimum required glib version to 2.32
  * endianness fixes
  * (small) leak fixes
  * usual round of code cleanups
  * not directly related to this release, but the upstream git
    repository is now hosted on gitlab.freedesktop.org
- Removed patches:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="astieger@suse.com" date="1537358401">- Upstream disabled support for the celt051 audio codec by default,
  do likewise in the spec
- Note updated 0.14.1 build dependencies in the spec:
  * OpenSSL 1.0.0 or newer is now required
  * glib 2.32 required
- add upstream signing key and verify source signature</changelog>
  <changelog author="brogers@suse.com" date="1548676800">- Fix OOB memory access in internal tracking of slot_ids and
  group_ids. (CVE-2019-3813 bsc#1122706)
  * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch
- Remove celt051 Requires directive</changelog>
  <changelog author="olaf@aepfle.de" date="1551441600">- Use plain python2 for SLE12 builds
- Remove PYTHON=python3, configure will find and use the python3</changelog>
  <changelog author="brogers@suse.com" date="1558008000">- Update to v0.14.2 stable release
  The main changes are support for Meson build and graphic device
  info messages allowing to better support multi-monitor
  configurations.
  * support H265 in stream-channel
  * add support for building with meson/ninja
  * minor tests fixes improving CI
  * set char device state for smartcard, allowing Qemu optimization
  * improve red-parse-qxl.c interface making it more consistent
  * add some instrumentation for streaming device
  * QXL interface: add a function to identify monitors in the guest
    (spice_qxl_set_device_info)
  * add support for GraphicsDeviceInfo messages
  * video-stream: prevent crash on stream reattach
  * make channel client callbacks virtual functions
  * bumped minimum required glib version to 2.38
  * attempt to have a reliable led state for keyboard modifiers
- Removed patches:
  (The first two are altered versions of what is carried upstream.
  I think we're fine with what upstream does here)
  0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
  0002-lz-More-checks-on-image-sizes.patch
  0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch</changelog>
  <changelog author="brogers@suse.com" date="1601899200">- Fix buffer overflow vulnerabilities in QUIC image decoding
  (CVE-2020-14355 bsc#1177158)
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
  <changelog author="carnold@suse.com" date="1622116800">- bsc#1181686 - VUL-0: CVE-2021-20201: spice,spice-gtk: client
  initiated renegotiation denial of service
  0001-With-OpenSSL-1.1-Disable-client-initiated-renegotiation.patch
  0002-With-OpenSSL-1.0.2-and-earlier-disable-client-side-renegotiation.patch</changelog>
</package>
<package pkgid="09f3c864a545f4b91643aec34a8c2a89ddfcc9640f2493febee04803e15c71c3" name="spice-gtk" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="e040d4e7fd3291110cd4ff0c3ee68705631c459369c6b418b281f2e51a8663a4" name="spice-gtk" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6e15ffd495f29dc6ada0fbb1e5f1e6f12eeda3b27aafdc1001849d5a522fb207" name="spice-gtk" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="6cf7fd7a21dcc29e8a1508c0b9811773dfabdf7a1f7b90ec4a44e64f059e03f0" name="spice-gtk" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="8b0898328057a093963507c476b0871704ba885e4751e659f4fa52512cd85ca7" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="039caadb4243fb26ce43965a8bdd7a400e752a8a0c7d46d4cb6d9e5570224a7e" name="spice-gtk" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="cc0f544f2c4d0308a05133739f7e98c2acabab1165654c6f871384f155fa6466" name="spice-gtk" arch="aarch64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="d415cfa17865e3c3c72e149eb70c5862bd2af5db82e709711cb3f1740bb73140" name="spice-gtk" arch="i586">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="bc1665422151a9cabc9cd69f69fb8bfe8ef40aaa752b947f038280786f1cd87f" name="spice-gtk" arch="ppc64le">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="fd3da54bf15c0fe8ac4f9196c4af180d55458feb56ce1d664b64101c166491f4" name="spice-gtk" arch="s390x">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="e7f35f624aa2d0f52ee596544009826f592315bb0c0f5d6f46404d836cc34721" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="ace887a5fdce0e49b374e7bc582199683b907bef40829997b75ef17785929efa" name="spice-gtk" arch="x86_64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="d2e2c3fea62beca996f5c5fe28441c382a92cbdab2fe9a93eaf61d7bda956474" name="spice-gtk-devel" arch="aarch64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="43da02edc10883bb1d48c7ddcab2e5a7f28142cdb36a4f808a5bb16d8281351a" name="spice-gtk-devel" arch="i586">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="69b93e728802e0f598f3885f0e95b5babdd2f239a3befbe175d350aed28e4197" name="spice-gtk-devel" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="226fc48e8050a45f59c0ded2b9914f833349f54d544783568696a6b3597711bf" name="spice-gtk-devel" arch="s390x">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="66daec8053c92ddd1f7e7433115e8eaf34bfa6eacb858d17dd288de5451a0824" name="spice-gtk-devel" arch="x86_64">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="d55a2abbe89a322154a5b3f6d23b58e3caf41dae134397cd613511c9e642a4c9" name="spice-gtk-devel" arch="aarch64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="eb245a37854b373a0344473515ac75d203ec8ca3909a946ab1c441e1160fc265" name="spice-gtk-devel" arch="i586">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="1ab533e80ca4d8dde49961a07cb48cfabd3099577673ac03f2195adadac5fd13" name="spice-gtk-devel" arch="ppc64le">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="0681f59d1934a9916ff68eccbb2c545bb1cff96d8ed37e284c82ec57ee2239b6" name="spice-gtk-devel" arch="s390x">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="df1720c1b55b9f867409f4ba733d842d6da2ed17fe358fc52a588f75ebb7d88f" name="spice-gtk-devel" arch="x86_64">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="d3a6aabd6e69c76904891cb007f1feb45ca159bb996cfc1db3287e88974e45ac" name="spice-gtk-lang" arch="noarch">
  <version epoch="0" ver="0.34" rel="3.6.1"/>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="bc8d329f5e87b9a618719140af47ae092c75430b63decac2bbd86203e413b9e2" name="spice-gtk-lang" arch="noarch">
  <version epoch="0" ver="0.35" rel="3.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="brogers@suse.com" date="1523275200">- Partially fix bsc#1074144, where we have keymapping issues under Xwayland.
  + Add the following upstream patch:
  + Use-scancode-instead-of-keycode-names.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1528977600">- Update to version 0.35:
  + New SpiceSession::disconnected signal.
  + Use GstVideoOverlay if possible to render directly on
    Gstreamer's sink element.
  + Handling smooth-scroll for scroll events on touchpads in
    Wayland.
  + The spice-controller library was removed.
  + Fix migration regression introduced in v0.34 (rhbz#1558043).
  + Introspection: Fixes for SpicePortChannel,
    SpiceDisplayChannel, SpiceRecordChannel, SpiceInputsChannel,
    SpiceMainChannel.
  + Fix width computation for palette images (rhbz#1508847).
  + Introduction of spice+tls:// URI format to tls all channels.
  + Fix keycodes on Xwayland (rhbz#1479682).
  + Memory leak fixes.
- Drop:
  + Use-scancode-instead-of-keycode-names.patch: fixed upstream.
  + libspice-controller subpackage to follow upstream changes.
  + pkgconfig(celt051) BuildRequires: it is no longer required nor
    used.
- Switch python2 packages BuildRequires to python3, the new Python
  version default.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1542283200">- Add README.SUSE with information regarding the kvm group requirement for the
  USB passthrough feature to work.</changelog>
  <changelog author="carnold@suse.com" date="1622030400">- bsc#1177158 - VUL-0: CVE-2020-14355: spice,spice-gtk: multiple
  buffer overflow vulnerabilities in QUIC decoding code
  0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch
  0002-quic-Check-image-size-in-quic_decode_begin.patch
  0003-quic-Check-RLE-lengths.patch
  0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch</changelog>
</package>
<package pkgid="a05d7f74af19664e3ab2f726738ca5ab8a386e15c02cbcd054a2d06ac64ad6af" name="squid" arch="aarch64">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="ca48dcf4797941efa43e6933994286feb84c5790309fcc3756611098d7b24e53" name="squid" arch="i586">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="97343b15c0f72d1a124d4ed9e2106c0b525c3741bc9f6191497047e1d4061e69" name="squid" arch="ppc64le">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="e8178a6c98877e7f93da77964ee87feeae2816e9000a100d6bc488f654cc54d6" name="squid" arch="s390x">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="555aac9d8587c60d6ec051407631b1129cbee8557360da04d904a555b91c0edf" name="squid" arch="src">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="1989c1ce900093825c8c67525970234850ae5587369ac69c7a2e48ea289d7e99" name="squid" arch="x86_64">
  <version epoch="0" ver="4.15" rel="5.26.1"/>
  <changelog author="adam.majer@suse.de" date="1587643200">- Update to squid 4.11:
  * Fix incorrect buffer handling that can result in cache
    poisoning, remote execution, and denial of service attacks when
    processing ESI responses
    (CVE-2019-12519, CVE-2019-12521, bsc#1169659)
  * Fixes possible information disclosure when translating
    FTP server listings into HTTP responses.
    (CVE-2019-12528, bsc#1162689)
  * Fixes possible denial of service caused by incorrect buffer
    management ext_lm_group_acl when processing NTLM Authentication
    credentials. (CVE-2020-8517, bsc#1162691)
  * Fixes a potential remote execution vulnerability when using
    HTTP Digest Authentication (CVE-2020-11945, bsc#1170313)
  * Fixes problem when reconfigure killed Coordinator in
    SMP+ufs configurations (#556)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592740800">- squid 4.12:
  * Fixes a potential Denial of Service when processing TLS certificates
    during HTTPS or SSL-Bump connections (CVE-2020-14059, bsc#1173304)
  * Regression Fix: Revert to slow search for new SMP shm pages
  * Fix Negative responses are never cached
  * HTTP: validate Content-Length value prefix (CVE-2020-15049, bsc#1173455)
  * HTTP: add flexible RFC 3986 URI encoder
  * Fix stall if transaction overwrites a recently active cache
    entry</changelog>
  <changelog author="adam.majer@suse.de" date="1595592000">- Change pinger and basic_pam_auth helper to use standard permissions.
  pinger uses cap_net_raw=ep instead (bsc#1171569)
- Move squid helpers under /usr/lib{,64}/squid for Tumbleweed and SLE16
  Please adjust your config paths accordingly</changelog>
  <changelog author="adam.majer@suse.de" date="1598270400">- squid 4.13:
  * Enforce token characters for field-name (#700)
  * Fix livelocking in peerDigestHandleReply (#698)
    (bsc#1175671, CVE-2020-24606)
  * Improve Transfer-Encoding handling (#702)
    (bsc#1175665, CVE-2020-15811)
  * Forbid obs-fold and bare CR whitespace in framing header fields (#701)
  * Source Format Enforcement
  * Enforce token characters for field-name (#700)
    (bsc#1175664, CVE-2020-15810)
  * Do not stall while debugging a scan of an empty store_table (#699)
  * Fix livelocking in peerDigestHandleReply (#698)
  * Honor on_unsupported_protocol for intercepted https_port (#689)
  * Bug #5051: Some collapsed revalidation responses never expire (#683)
  * SslBump: Support parsing GREASEd (and future) TLS handshakes (#663)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1602158400">- Reinstate permissions macros for pinger binary, because the permissions
  package is also responsible for setting up the cap_net_raw capability,
  currently a fresh squid install doesn't get a capability bit at all
  (bsc#1171569).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1604059200">- fix previous change to reinstante permissions macros, because the wrong path
  has been used (bsc#1171569).
- use libexecdir instead of libdir to conform to recent changes in Factory
  (bsc#1171164).</changelog>
  <changelog author="adam.majer@suse.de" date="1604318400">- re-add older SLES12 requirements so we can use one devel project
  for all codestreams</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 4.14:
  - fixes HTTP Request Smuggling vulnerability (bsc#1183436, CVE-2020-25097)
  - Regression Fix: support for non-lowercase Transfer-Encoding value
  - Regression Fix: cachemgr.cgi wrong 403 response to authenticated menu URIs
  - Bug 5076: WCCP Security Info incorrect
  - Bug 5073: Compile error: index was not declared in this scope
  - Bug 5065: url_rewrite_program documentation update
  - Bug 3074 pt2: improved handling of URI paths implicit '/'
  - Fix transactions exceeding client_lifetime logged as _ABORTED</changelog>
  <changelog author="dmueller@suse.com" date="1620734400">- update to 4.15:
  - Bug 5112: Excessively loud chunked reply parsing error reporting
  - Bug 5106: Broken cache manager URL parsing (bsc#1185918, CVE-2021-28652)
  - Bug 5104: Memory leak in RFC 2169 response parsing
    (bsc#1185921, CVE-2021-28651)
  - Bug 3556: "FD ... is not an open socket" for accept() problems
  - Profiling: CPU timing implemented for MAC non-x86
  - Fix HttpHeaderStats definition to include hoErrorDetail
  - Fix Squid-to-client write_timeout triggers client_lifetime timeout
  - Limit HeaderLookupTable_t::lookup() to BadHdr and specific IDs
    (bsc#1185919, CVE-2021-28662)
  - Handle more Range requests (bsc#1185916, CVE-2021-31806)
  - Handle more partial responses (bsc#1185923)
  - Stop processing a response if the Store entry is gone
  - ... and some portability fixes
  - ... and some documentation updates</changelog>
  <changelog author="adam.majer@suse.de" date="1621339200">- fix building with SLE12</changelog>
</package>
<package pkgid="edc39e5c8a3d85555fc86cd6740b24c35513f7e7d8acb081ac942c909ed04a88" name="strongswan" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="ac3b43502496d63f118152b4819b857a30028caf41253f9dd9d61d0b306fefea" name="strongswan" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="094b281b296246562fb27faf803148e20a793c7cd160bec8377c1e5dcfdcce7f" name="strongswan" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="0d175e7af8b06047778477fb3b487a7b8c724659a68ddb10bfa190b6c3527329" name="strongswan" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="f6b1604256b619630fb8aeddf676448ee752ba28277269df4230ebfd91f131ba" name="strongswan" arch="src">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="7fe983b719e1f6cb45efa36d7effe72ec3c9124e353551f9cb751569929b1d14" name="strongswan" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="e39ee8452aeed3d5768741fab9110ac8cf12fdef748606a27b4675e86d48124b" name="strongswan-doc" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="b0880e19f13301b9f803c11b7ee52f48a306a17e98df67becea980a50a02d356" name="strongswan-hmac" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="abcb1503d6d30155465be7133ef87fe41eb46a1c726003676781db7f1433192d" name="strongswan-hmac" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="05ba0cb8894f96c230c025154ac84e60be422fe56d7195eb325ca74e7086989b" name="strongswan-hmac" arch="ppc64le">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="60cb539f929a93a65309aa3c06ae0427c18c1020d6663e975e07530c064eb29a" name="strongswan-hmac" arch="s390x">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="095503d7d3619a41203550ed1c6ba111ec72ad888e0f8af20e572126c4cb73ef" name="strongswan-hmac" arch="x86_64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="00414d7f2b747d3ddf82b03b531a89df7e97d5c8378a771ff20fd4800201cde5" name="strongswan-ipsec" arch="aarch64">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developers:
  * trap_manager_t: Trap policies are now unistalled by peer/child name and not the reqid.
  * No reqid is returned anymore when installing trap policies.
  * child_sa_t: A new state (CHILD_DELETED) is used for CHILD_SAs that have been deleted but
    not yet destroyed (after a rekeying CHILD_SAs are kept around for a while to process
    delayed packets).
    This way child_updown events are not triggered anymore for such SAs when an IKE_SA that
    has such CHILD_SAs assigned is deleted.
  - Version 5.6.2
  ===============
  * Fixed a DoS vulnerability in the parser for PKCS#1 RSASSA-PSS signatures that was caused
    by insufficient input validation. One of the configurable parameters in algorithm identifier
    structures for RSASSA-PSS signatures is the mask generation function (MGF). Only MGF1 is
    currently specified for this purpose. However, this in turn takes itself a parameter that
    specifies the underlying hash function. strongSwan's parser did not correctly handle the
    case of this parameter being absent, causing an undefined data read.
    This vulnerability has been registered as CVE-2018-6459.
  * When rekeying IKEv2 IKE_SAs the previously negotiated DH group will be reused, instead of
    using the first configured group, which avoids an additional exchange if the peer previously
    selected a different DH group via INVALID_KE_PAYLOAD notify. The same is also done when
    rekeying CHILD_SAs except for the first rekeying of the CHILD_SA that was created with the
    IKE_SA, where no DH group was negotiated yet.
    Also, the selected DH group is moved to the front in all sent proposals that contain it
    and all proposals that don't are moved to the back in order to convey the preference for
    this group to the peer.
  * Handling of MOBIKE task queuing has been improved. In particular, the response to an
    address update (with NAT-D payloads) is not ignored anymore if only an address list update
    or DPD is queued as that could prevent updating the UDP encapsulation in the kernel.
  * On Linux, roam events may optionally be triggered by changes to the routing rules, which
    can be useful if routing rules (instead of e.g. route metrics) are used to switch from one
    to another interface (i.e. from one to another routing table). Since routing rules are
    currently not evaluated when doing route lookups this is only useful if the kernel-based
    route lookup is used (4664992f7d).
  * The fallback drop policies installed to avoid traffic leaks when replacing addresses in
    installed policies are now replaced by temporary drop policies, which also prevent
    acquires because we currently delete and reinstall IPsec SAs to update their addresses
    (35ef1b032d).
  * Access X.509 certificates held in non-volatile storage of a TPM 2.0 referenced via the
    NV index.
    Adding the --keyid parameter to pki --print allows to print private keys or certificates
    stored in a smartcard or a TPM 2.0.
  * Fixed proposal selection if a peer incorrectly sends DH groups in the ESP proposal during
    IKE_AUTH and also if a DH group is configured in the local ESP proposal and charon.prefer
    configured_proposals is disabled (d058fd3c32).
  * The lookup for PSK secrets for IKEv1 has been improved for certain scenarios (see #2497
    for details).
  * MSKs received via RADIUS are now padded to 64 bytes to avoid compatibility issues with
    EAP-MSCHAPv2 and PRFs that have a block size &lt; 64 bytes (e.g. AES-XCBC-PRF-128, see
    73cbce6013).
  * The tpm_extendpcr command line tool extends a digest into a TPM PCR.
  * Ported the NetworkManager backend from the deprecated libnm-glib to libnm.
  * The save-keys debugging/development plugin saves IKE and/or ESP keys to files compatible
    with Wireshark.
  - Version 5.6.1
  ===============
  * Several algorithms were removed from the default ESP/AH and IKE proposals in compliance with
    RFC 8221 and RFC 8247, respectively. Removed from the default ESP/AH proposal were the
    3DES and Blowfish encryption algorithms and the HMAC-MD5 integrity algorithm. From the IKE
    default proposal the HMAC-MD5 integrity algorithm and the MODP-1024 Diffie-Hellman group
    were removed (the latter is significant for Windows clients in their default configuration).
    These algorithms may still be used in custom proposals.
  * Support for RSASSA-PSS signatures has been added. For compatibility with previous
    releases they are currently not used automatically, by default, to change that charon.rsa_pss
    may be enabled. To explicitly use or require such signatures during IKEv2 signature
    authentication (RFC 7427) ike:rsa/pss... authentication constraints may be used for specific
    connections (regardless of whether the strongswan.conf option above is enabled). Only the
    hash algorithm can be specified in such constraints, the MGF1 will be based on that hash
    and the salt length will equal the hash length (when verifying the salt length is not
    enforced).
    To enforce such signatures during PKI verification use rsa/pss... authentication constraints.
  * All pki commands that create certificates/CRLs can be made to sign with RSASSA-PSS instead
    of the classing PKCS#1 scheme with the --rsa-padding pss option. As with signatures during
    authentication, only the hash algorithm is configurable (via --digest option), the MGF1 will
    be based on that and the salt length will equal the hash length.
  * These signatures are supported by all RSA backends except pkcs11 (i.e. gmp, gcrypt, openssl).
    The gmp plugin requires the mgf1 plugin.
    Note that RSASSA-PSS algorithm identifiers and parameters in keys (public keys in
    certificates or private keys in PKCS#8 files) are currently not used as constraints.
  * The sec-updater tool checks for security updates in dpkg-based repositories
    (e.g. Debian/Ubuntu) and sets the security flags in the IMV policy database accordingly.
    Additionally for each new package version a SWID tag for the given OS and HW architecture
    is created and stored in the database.
  * Using the sec-updater.sh script template the lookup can be automated (e.g. via an hourly
    cron job).
  * When restarting an IKEv2 negotiation after receiving an INVALID_KE_PAYLOAD notify (or due
    to other reasons like too many retransmits) a new initiator SPI is allocated. This
    prevents issues caused by retransmits for IKE_SA_INIT messages.
  * Because the initiator SPI was previously reused when restarting the connection delayed
    responses for previous connection attempts were processed and might have caused fatal
    errors due to a failed DH negotiation or because of the internal retry counter in the
    ike-init task. For instance, if we proposed a DH group the responder rejected we
    might have later received delayed responses that either contained INVALID_KE_PAYLOAD
    notifies with the DH group we already switched to, or, if we retransmitted an
    IKE_SA_INIT with the requested group but then had to restart again, a KE payload with
    a group different from the one we proposed.
  * The introduction of file versions in the IMV database scheme broke file reference hash
    measurements. This has been fixed by creating generic product versions having an empty
    package name.
  * A new timeout option for the systime-fix plugin stops periodic system time checks after
    a while and enforces a certificate verification, closing or reauthenticating all SAs
    with invalid certificates.
  * The IKE event counters, previously only available via ipsec listcounters command, may
    now also be queried and reset via vici and the new swanctl --counters command. They
    are collected and provided by the optional counters plugin (enabled by default for
    backwards compatibility if the stroke plugin is built).
  * Class attributes received in RADIUS Access-Accept messages may optionally be added to
    RADIUS accounting messages (655924074b).
  * Basic support for systemd sockets has been added, which may be used for privilege separation
    (59db98fb94).
  * Inbound marks may optionally be installed in the SA again (was removed with 5.5.2) by
    enabling the mark_in_sa option in swanctl.conf.
  * The timeout of leases in pools configured via pool utility may be configured in other
    units than hours.
    INITIAL_CONTACT notifies are now only omitted if never is configured as uniqueness policy.
  * Outbound FWD policies for shunts are not installed anymore, by default (as is the case
    for other policies since 5.5.1).
  * Don't consider a DH group mismatch during CHILD_SA rekeying as failure as responder
    (e7276f78aa).
  * Handling of fragmented IPv4 and IPv6 packets in libipsec has been improved (e138003de9).
  * Trigger expire events for the correct IPsec SA in libipsec (6e861947a0).
  * A crash in CRL verification via openssl plugin using OpenSSL 1.1 has been fixed (78acaba6a1).
  * No hard-coded default proposals are passed from starter to the stroke plugin anymore (the
    IKE proposal used curve25519 since 5.5.2, which is an optional plugin).
  * A workaround for an issue with virtual IPs on macOS 10.13 (High Sierra) has been added
    (039b85dd43).
  * Handling of IKE_SA rekey collisions in charon-tkm has been fixed.
  * Instead of failing or just silently doing nothing unit tests may now warn about certain
    conditions (e.g. if a test was not executed due to external dependencies).</changelog>
  <changelog author="mmnelemane@suse.com" date="1585224000">- Fix for to resolve multiple definition of swanctl_dir (bsc #1164493)
  [+ 0006-Resolve-multiple-definition-of-swanctl_dir.patch]</changelog>
  <changelog author="mbuil@suse.com" date="1610712000">- Fix typo in README (bsc #1167880)
  [+ 0007-Fix-typo-in-README.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1611576000">- Fix FIPS bug (bsc #1180801)
  [+ 0008-gcrypt-Use-a-dummy-buffer-to-initialize-static-alloc.patch ]</changelog>
  <changelog author="mbuil@suse.com" date="1617019200">- Keep using ipsec as the main binary. Therefore, make strongswan.service point to it instead of swanctl</changelog>
  <changelog author="mbuil@suse.com" date="1617019201">- Information added in README about the rcstrongswan-starter</changelog>
  <changelog author="mt@suse.com" date="1619006400">- Add support for AES CCM aead algorithms to openssl plugin (cc/fips,bsc#1185363)
  [+ 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
  <changelog author="mt@suse.com" date="1620388800">- Replace AEAD AES CCM patch with upstream variant (cc/fips,bsc#1185363)
  [* 0009-strongswan-openssl-aead-add-ccm-support.patch]</changelog>
</package>
<package pkgid="6fca611eddaa7dafed169c40efa9c908cae449d4fe86f646e692204847425c3b" name="strongswan-ipsec" arch="i586">
  <version epoch="0" ver="5.8.2" rel="11.14.1"/>
  <changelog author="mmnelemane@suse.com" date="1573646400">- Added patch to fix vulnerability: CVE-2018-10811 (bsc#1093536)
  - denial-of-service vulnerability
  [+ 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1573732800">- Added patch to fix vulnerability: CVE-2018-17540 (bsc#1109845)
  [+ 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch]</changelog>
  <changelog author="mmnelemane@suse.com" date="1580212800">- Updated to version 5.8.2 (jsc#SLE-11370)
  - Dropped following patches due to irrelevance in the updated version:
    [- strongswan_modprobe_syslog.patch ]
    [- strongswan_fipsfilter.patch ]
    [- 0006-fix-compilation-error-by-adding-stdint.h.patch ]
    [- 0007-strongswan-5.3.1-5.6.0_gmp-pkcs1-verify.patch ]
    [- 0008-strongswan-5.1.2-5.6.2_stroke_msg_len.patch ]
    [- 0009-strongswan-5.5.0-5.6.2_skeyseed_init.patch ]
    [- 0010-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch ]
  - Version 5.8.2
  ===============
  * Identity-based CA constraints, which enforce that the certificate chain of the remote
    peer contains a CA certificate with a specific identity, are supported via
    vici/swanctl.conf. This is similar to the existing CA constraints but doesn't require
    that the CA certificate is locally installed, for instance, intermediate CA certificates
    received from the peers. Wildcard identity matching (e.g. ..., OU=Research, CN=*) could
    also be used for the latter but requires trust in the intermediate CAs to only issue
    certificates with legitimate subject DNs (e.g. the "Sales" CA must not issue certificates
    with OU=Research). With the new constraint that's not necessary as long as a path length
    basic constraint (--pathlen for pki --issue) prevents intermediate CAs from issuing further
    intermediate CAs.
  * Intermediate CA certificates may now be sent in hash-and-URL encoding by configuring a
    base URL for the parent CA (#3234, swanctl/rw-hash-and-url-multi-level).
  * Implemented NIST SP-800-90A Deterministic Random Bit Generator (DRBG) based on AES-CTR
    and SHA2-HMAC modes. Currently used by the gmp and ntru plugins.
  * Random nonces sent in an OCSP requests are now expected in the corresponding OCSP responses.
  * The kernel-netlink plugin now ignores deprecated IPv6 addresses for MOBIKE. Whether temporary
    or permanent IPv6 addresses are included now depends on the charon.prefer_temporary_addrs
    setting (#3192).
  * Extended Sequence Numbers (ESN) are configured via PF_KEY if supported by the kernel.
  * The PF_KEY socket's receive buffer in the kernel-pfkey plugin is now cleared before sending
    requests, as many of the messages sent by the kernel are sent as broadcasts to all PF_KEY
    sockets. This is an issue if an external tool is used to manage SAs/policies unrelated to
    IPsec (#3225).
  * The vici plugin now uses unique section names for CHILD_SAs in child-updown events (7c74ce9190).
  * For individually deleted CHILD_SAs (in particular for IKEv1) the vici child-updown event
    now includes more information about the CHILD_SAs such as traffic statistics (#3198).
  * Custom loggers are correctly re-registered if log levels are changed via stroke loglevel (#3182).
  * Avoid lockups during startup on low entropy systems when using OpenSSL 1.1.1 (095a2c2eac).
  * Instead of failing later when setting a key, creating HMACs via openssl plugin now fails
    instantly if the underlying hash algorithm isn't supported (e.g. MD5 in FIPS-mode) so fallbacks
    to other plugins work properly (#3284).
  * Exponents of RSA keys read from TPM 2.0 via SAPI are correctly converted (8ee1242f1438).
  * Routing table IDs &gt; 255 are supported for custom routes on Linux.
  * To avoid races, the check for hardware offloading support in the kernel-netlink plugin is
    performed during initialization of the plugin (a605452c03).
  * The D-Bus config file for charon-nm is now installed in $(datadir)/dbus-1/system.d instead of
    $(sysconfdir)/dbus-1/system.d, which is intended for sysadmin overrides.
    INVALID_MAJOR_VERSION notifies are now correctly sent in messages of the same exchange type
    and with the same message ID as the request.
  * IKEv2 SAs are now immediately destroyed when sending or receiving INVALID_SYNTAX notifies
    in authenticated messages.
  * For developers working from the repository the configure script now aborts if GNU gperf is
    not found.
  - Version 5.8.1
  ===============
  * RDNs in DNs of X.509 certificates can now optionally be matched less strict. The global
    strongswan.conf option charon.rdn_matching takes two alternative values that cause the
    matching algorithm to either ignore the order of matched RDNs (reordered) or additionally
    (relaxed) accept DNs that contain more RDNs than configured (unmatched RDNs are treated
    like wildcard matches).
  * The updown plugin now passes the same interface to the script that is also used for the
    automatically installed routes, that is, the interface over which the peer is reached
    instead of the interface on which the local address is found (#3095).
  * TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple IKE_SAs use
    the same private key concurrently (4b25885025).
  * Do a rekey check after the third QM message was received (#3060).
  * If available, explicit_bzero() is now used as memwipe() instead of our own implementation.
  * An .editorconfig file has been added, mainly so Github shows files with proper indentation
    (68346b6962).
  * The internal certificate of the load-tester plugin has been modified so it can again be
    used as end-entity cert with 5.6.3 and later (#3139).
  * The maximum data length of received COOKIE notifies (64 bytes) is now enforced (#3160).
  - Version 5.8.0
  ===============
  * The systemd service units have been renamed. The modern unit, which was called
    strongswan-swanctl, is now called strongswan (the previous name is configured as alias in
    the unit, for which a symlink is created when the unit is enabled). The legacy unit is now
    called strongswan-starter.
  * Support for XFRM interfaces (available since Linux 4.19) has been added, which are intended
    to replace VTI devices (they are similar but offer several advantages, for instance, they
    are not bound to an address or address family).
  * IPsec SAs and policies are associated with such interfaces via interface IDs that can be
    configured in swanctl.conf (dynamic IDs may optionally be allocated for each SA and even
    direction). It's possible to use separate interfaces for in- and outbound traffic (or
    only use an interface in one direction and regular policies in the other).
  * Interfaces may be created dynamically via updown/vici scripts, or statically before or after
    establishing the SAs. Routes must be added manually as needed (the daemon will not install
    any routes for outbound policies with an interface ID).
  * When moving XFRM interfaces to other network namespaces they retain access to the SAs and
    policies installed in the original namespace, which allows providing IPsec tunnels for
    processes in other network namespaces without giving them access to the IPsec keys or
    IKE credentials.
    More information can be found on the page about route-based VPNs.
  * Initiation of childless IKE_SAs is supported (RFC 6023). If enabled and supported by the
    responder, no CHILD_SA is established during IKE_AUTH. Instead, all CHILD_SAs are created
    with CREATE_CHILD_SA exchanges. This allows using a separate DH exchange even for the
    first CHILD_SA, which is otherwise created during IKE_AUTH with keys derived from the
    IKE_SA's key material.
  * The swanctl --initiate command may be used to initiate only the IKE_SA via --ike
    option if --child is omitted and the peer supports this extension.
  * The NetworkManager backend and plugin support IPv6.
  * The new wolfssl plugin is a wrapper around the wolfSSL crypto library. Thanks to Sean
    Parkinson of wolfSSL Inc. for the initial patch.
  * IKE SPIs may optionally be labeled via the charon.spi_mask|label options in
    strongswan.conf. This feature was extracted from charon-tkm, however, now applies the
    mask/label in network order.
  * The openssl plugin supports ChaCha20-Poly1305 when built with OpenSSL 1.1.0.
  * The PB-TNC finite state machine according to section 3.2 of RFC 5793 was not correctly
    implemented when sending either a CRETRY or SRETRY batch. These batches can only be sent
    in the "Decided" state and a CRETRY batch can immediately carry all messages usually
    transported by a CDATA batch. It is currently not possible to send a SRETRY batch since
    full-duplex mode for PT-TLS transport is not supported.
  * Instead of marking IPv6 virtual IPs as deprecated, the kernel-netlink plugin now uses
    address labels to avoid that such addresses are used for non-VPN traffic (00a953d090).
  * The agent plugin now creates sockets to the ssh/gpg-agent dynamically and does not keep
    them open, which otherwise might prevent the agent from getting terminated.
  * To avoid broadcast loops the forecast plugin now only reinjects packets that are marked
    or received from the configured interface.
  * UTF-8 encoded passwords are supported via EAP-MSCHAPv2, which internally uses an UTF-16LE
    encoding to calculate the NT hash (#3014).
  * Properly delete temporary drop policies (used when updating IP addresses of SAs) if manual
    priorities are used, which was broken since 5.6.2 (8e31d65730).
  * Avoid overwriting start_action when parsing the inactivity timeout in the vici plugin (#2954).
  * Fixed the automatic termination of reloaded vici connections with start_action=start,
    which was broken since 5.6.3 (71b22c250f).
  * The lookup for shared secrets for IKEv1 SAs via sql plugin should now work better
    (6ec9f68f32).
  * Fixed a race condition in the trap manager between installation and removal of a policy
    (69cbe2ca3f).
  * Compilation of the kernel-netlink plugin has been fixed on old kernels (&lt; 2.6.39), which
    was caused by the HW offload changes (c7f579fa17).
  * The IPsec stack detection and module loading in starter has been removed (it wasn't
    enforced anyway and loading modules doesn't seem necessary, also KLIPS hasn't been
    supported for a long time and PF_KEY will eventually be removed from the Linux kernel,
    ba817d2917).
  * Several IKEv2 protocol details are now handled more strictly: Unrequested virtual IPs are
    ignored, CFG_REPLY payloads are ignored if no CFG_REQUEST payloads were sent, a USE
    TRANSPORT_MODE notify received from the responder is checked against the local configuration.
  * The keys and certificates used by the scenarios in the testing environment are now generated
    dynamically. Running the testing/scripts/build-certs script after creating the base and root
    images uses the pki utility installed in the latter to create the keys and certificates for
    all the CAs and in some cases for individual scenarios. These credentials are stored in the
    source tree, not the image, so this has to be called only once even if the images are later
    rebuilt. The script automatically (re-)rebuilds the guest images as that generates fresh
    CRLs and signs the DNS zones. The only keys/certificates currently not generated are the
    very large ones used by the ikev2/rw-eap-tls-fragments scenario.
  - Version 5.7.2
  ===============
  * For RSA with PSS padding, the TPM 2.0 specification mandates the maximum salt length
    (as defined by the length of the key and hash). However, if the TPM is FIPS-168-4 compliant,
    the salt length equals the hash length. This is assumed for FIPS-140-2 compliant TPMs, but
    if that's not the case, it might be necessary to manually enable charon.plugins.tpm.fips_186_4
    if the TPM doesn't use the maximum salt length.
  * Directories for credentials loaded by swanctl are now accessed relative to the loaded
    swanctl.conf file, in particular, when loading it from a custom location via --file argument.
  * The base directory, which is used if no custom location for swanctl.conf is specified, is now
    also configurable at runtime via SWANCTL_DIR environment variable.
  * If RADIUS Accounting is enabled, the eap-radius plugin will add the session ID (Acct-Session-Id)
    to Access-Request messages, which e.g. simplifies associating database entries for IP leases and
    accounting with sessions (the session ID does not change when IKE_SAs are rekeyed, #2853).
  * All IP addresses assigned by a RADIUS server are included in Accounting-Stop messages even if
    the client did not claim them, allowing to release them early in case of connection errors (#2856).
  * Selectors installed on transport mode SAs by the kernel-netlink plugin are now updated if an
    IP address changes (e.g. via MOBIKE) and it was part of the selectors.
  * No deletes are sent anymore when a rekeyed CHILD_SA expires (#2815).
  * The bypass-lan plugin now tracks interfaces to handle subnets that move from one interface
    to another and properly update associated routes (#2820).
  * Only valid and expected inbound IKEv2 messages are used to update the timestamp of the
    last received message (previously, retransmits also triggered an update).
  * IKEv2 requests from responders are now ignored until the IKE_SA is fully established (e.g. if a
    DPD request from the peer arrives before the IKE_AUTH response does, 46bea1add9).
    Delayed IKE_SA_INIT responses with COOKIE notifies we already recevied are ignored, they caused
    another reset of the IKE_SA previously (#2837).
  * Active and queued Quick Mode tasks are now adopted if the peer reauthenticates an IKEv1 SA
    while creating lots of CHILD_SAs.
  * Newer versions of the FreeBSD kernel add an SADB_X_EXT_SA2 extension to SADB_ACQUIRE
    messages, which allows the kernel-pfkey plugin to determine the reqid of the policy even if it
    wasn't installed by the daemon previously (e.g. when using FreeBSD's if_ipsec(4) VTIs, which
    install policies themselves, 872b9b3e8d).
  * Added support for RSA signatures with SHA-256 and SHA-512 to the agent plugin. For older
    versions of ssh/gpg-agent that only support SHA-1, IKEv2 signature authentication has to be
    disabled via charon.signature_authentication.
  * The sshkey and agent plugins support Ed25519/Ed448 SSH keys and signatures.
  * The openssl plugin supports X25519/X448 Diffie-Hellman and Ed25519/Ed448 keys and
    signatures when built against OpenSSL 1.1.1.
  * Support for Ed25519, ChaCha20/Poly1305, SHA-3 and AES-CCM were added to the botan plugin.
  * The mysql plugin now properly handles database connections with transactions
    under heavy load (#2779).
  * IP addresses in ha pools are now distributed evenly among all segments (#2828).
  * Private key implementations may optionally provide a list of supported signature schemes,
    which, as described above, is used by the tpm plugin because for each key on a TPM 2.0 the
    hash algorithm and for RSA also the padding scheme is predefined.
  * The testing environment is now based on Debian 9 (stretch) by default. This required
    some changes, in particular, updating to FreeRADIUS 3.x (which forced us to abandon the
    TNC@FHH patches and scenarios, 2fbe44bef3) and removing FIPS-enabled versions of
    OpenSSL (the FIPS module only supports OpenSSL 1.0.2).
  * Most test scenarios were migrated to swanctl.
  - Version 5.7.1
  ===============
  * Fixes a vulnerability in the gmp plugin triggered by crafted certificates with RSA keys with
    very small moduli. When verifying signatures with such keys, the code patched with the fix
    for CVE-2018-16151/2 caused an integer underflow and subsequent heap buffer overflow
    that results in a crash of the daemon.
  * The vulnerability has been registered as CVE-2018-17540.
  - Version 5.7.0
  ===============
  * Fixes a potential authorization bypass vulnerability in the gmp plugin that was caused by a
    too lenient verification of PKCS#1 v1.5 signatures. Several flaws could be exploited by a
    Bleichenbacher-style attack to forge signatures for low-exponent keys (i.e. with e=3).
  * CVE-2018-16151 has been assigned to the problem of accepting random bytes after the OID
    of the hash function in such signatures, and CVE-2018-16152 has been assigned to the issue
    of not verifying that the parameters in the ASN.1 algorithmIdentitifer structure is empty.
    Other flaws that don't lead to a vulnerability directly (e.g. not checking for at least
    8 bytes of padding) have no separate CVE assigned.
  * Dots are not allowed anymore in section names in swanctl.conf and strongswan.conf.
    This mainly affects the configuration of file loggers. If the path for such a log file
    contains dots it now has to be configured in the new path setting within the arbitrarily
    renamed subsection in the filelog section.
  * Sections in swanctl.conf and strongswan.conf may now reference other sections. All settings
    and subsections from such a section are inherited. This allows to simplify configs as
    redundant information has only to be specified once and may then be included in other
    sections (see strongswan.conf for an example).
  * The originally selected IKE config (based on the IPs and IKE version) can now change
    if no matching algorithm proposal is found. This way the order of the configs doesn't
    matter that much anymore and it's easily possible to specify separate configs for
    clients that require weaker algorithms (instead of having to also add them in other
    configs that might be selected).
  * Support for Postquantum Preshared Keys for IKEv2 (draft-ietf-ipsecme-qr-ikev2) has been added.
    For an example refer to the swanctl/rw-cert-ppk scenario (or with EAP, or PSK authentication).
  * The new botan plugin is a wrapper around the Botan C++ crypto library.
    It requires a fairly recent build from Botan's master branch (or the upcoming 2.8.0 release).
    Thanks to René Korthaus and his team from Rohde &amp; Schwarz Cybersecurity for the initial
    patch and to Jack Lloyd for quickly adding missing functions to Botan's FFI (C89) interface.
  * Implementation of RFC 8412 "Software Inventory Message and Attributes (SWIMA) for PA-TNC".
  * SWIMA subscription option sets CLOSE_WRITE trigger on apt history.log file resulting in
    a ClientRetry PB-TNC batch to initialize a new measurement cycle. The new imv/imc-swima
    plugins replace the previous imv/imc-swid plugins, which were removed.
  * Added support for fuzzing the PA-TNC (RFC 5792) and PB-TNC (RFC 5793) NEA protocols
    on Google's OSS-Fuzz infrastructure.
  * Support for version 2 of Intel's TPM2-TSS TGC Software Stack. The presence of the
    in-kernel /dev/tpmrm0 resource manager is automatically detected.
  * The pki tool accepts a xmppAddr otherName as a subjectAlternativeName using the
    syntax --san xmppaddr:&lt;jid&gt;.
  * swanctl.conf supports the configuration of marks the in- and/or outbound SA should apply
    to packets after processing on Linux. Configuring such a mark for outbound SAs requires
    at least a 4.14 kernel. The ability to set a mask and configuring a mark/mask for
    inbound SAs will be added with the upcoming 4.19 kernel.
  * New options in swanctl.conf allow configuring how/whether DF, ECN and DS fields in the
    IP headers are copied during IPsec processing. Controlling this is currently only possible
    on Linux.
  * The handling of sequence numbers in IKEv1 DPDs has been improved (#2714).
  * To avoid conflicts, the dhcp plugin now only uses the DHCP server port if explicitly
    configured.
  - Version 5.6.3
  ===============
  * Fixed a DoS vulnerability in the IKEv2 key derivation if the openssl plugin is used in FIPS
    mode and HMAC-MD5 is negotiated as PRF.
    This vulnerability has been registered as CVE-2018-10811.
  * Fixed a vulnerability in the stroke plugin, which did not check the received length before
    reading a message from the socket. Unless a group is configured, root privileges are
    required to access that socket, so in the default configuration this shouldn't be an issue.
    This vulnerability has been registered as CVE-2018-5388.
  * CRLs that are not yet valid are now ignored to avoid problems in scenarios where expired
    certificates are removed from new CRLs and the clock on the host doing the revocation
    check is trailing behind that of the host issuing CRLs. Not doing this could result in
    accepting a revoked and expired certificate, if it's still valid according to the
    trailing clock but not contained anymore in not yet valid CRLs.
  * The issuer of fetched CRLs is now compared to the issuer of the checked certificate (#2608).
  * CRL validation results other than revocation (e.g. a skipped check because the CRL couldn't
    be fetched) are now stored also for intermediate CA certificates and not only for end-entity
    certificates, so a strict CRL policy can be enforced in such cases.
  * In compliance with RFC 4945, section 5.1.3.2, certificates used for IKE must now either
    not contain a keyUsage extension (like the ones generated by pki), or have at least one of the
    digitalSignature or nonRepudiation bits set.
  * New options for vici/swanctl allow forcing the local termination of an IKE_SA. This might be
    useful in situations where it's known the other end is not reachable anymore, or that it
    already removed the IKE_SA, so retransmitting a DELETE and waiting for a response would
    be pointless.
  * Waiting only a certain amount of time for a response (i.e. shorter than all retransmits
    would be) before destroying the IKE_SA is also possible by additionally specifying a
    timeout in the forced termination request.
  * When removing routes, the kernel-netlink plugin now checks if it tracks other routes for
    the same destination and replaces the installed route instead of just removing it. Same
    during installation, where existing routes previously weren't replaced. This should allow
    using traps with virtual IPs on Linux (#2162).
  * The dhcp plugin now only sends the client identifier DHCP option if the identity_lease
    setting is enabled (7b660944b6). It can also send identities of up to 255 bytes length,
    instead of the previous 64 bytes (30e886fe3b, 0e5b94d038). If a server address is
    configured, DHCP requests are now sent from port 67 instead of 68 to avoid ICMP port
    unreachables (becf027cd9).
  * The handling of faulty INVALID_KE_PAYLOAD notifies (e.g. one containing a DH group
    that wasn't proposed) during CREATE_CHILD_SA exchanges has been improved (#2536).
  * Roam events are now completely ignored for IKEv1 SAs (there is no MOBIKE to handle such
    changes properly).
  * ChaCha20/Poly1305 is now correctly proposed without key length (#2614). For compatibility with
    older releases the chacha20poly1305compat keyword may be included in proposals to also propose
    the algorithm with a key length (c58434aeff).
  * Configuration of hardware offload of IPsec SAs is now more flexible and allows a new
    setting (auto), which automatically uses it if the kernel and device both support it. If hw
    offload is set to yes and offloading is not supported, the CHILD_SA installation now fails.
  * The kernel-pfkey plugin optionally installs routes via internal interface (one with an IP
    in the local traffic selector). On FreeBSD, enabling this selects the correct source IP
    when sending packets from the gateway itself (e811659323).
  * SHA-2 based PRFs are supported in PKCS#8 files as generated by OpenSSL 1.1 (#2574).
  * The pki --verify tool may load CA certificates and CRLs from directories.
  * The IKE daemon now also switches to port 4500 if the remote port is not 500 (e.g. because the
    remote maps the response to a different port, as might happen on Azure), as long as the local
    port is 500 (85bfab621d).
  * Fixed an issue with DNS servers passed to NetworkManager in charon-nm (ee8c25516a).
  * Logged traffic selectors now always contain the protocol if either protocol or port are set
    (a36d8097ed).
  * Only the inbound SA/policy will be updated as reaction to IP address changes for rekeyed
    CHILD_SAs that are kept around.
  * The parser for strongswan.conf/swanctl.conf now accepts = characters in values without
    having to put the value in quotes (e.g. for Base64 encoded shared secrets).
    Notes for developer